CVE-2008-4564
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...
CVE-2008-4564 is a high vulnerability (CVSS 9.3) in Ibm Lotus Notes, published March 18, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.76%, the 94th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 6.76%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
CVE-2008-4564- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
CVE-2008-4564- Updated
- 2026-11-02
EUVDEUVD-2008-4545No score
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
EUVD-2008-4545- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p66-f3jg-vmhhNo score
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
- Record
GHSA-6p66-f3jg-vmhh- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
symantec.com/avcenter/security/Content/2009.03.17a.html
vupen.com/english/advisories/2009/0744
secunia.com/advisories/34303
securitytracker.com/id?1021859
exchange.xforce.ibmcloud.com/vulnerabilities/49284
Show 14 moreShow less
www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573
securitytracker.com/id?1021856
kb.cert.org/vuls/id/276563
customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html
osvdb.org/52713
labs.idefense.com/intelligence/vulnerabilities/display.php?id=774
securityfocus.com/bid/34086
nvd.nist.gov/vuln/detail/CVE-2008-4564
github.com/advisories/GHSA-6p66-f3jg-vmhh