{"id":"CVE-2008-4564","aliases":["EUVD-2008-4545","GHSA-6p66-f3jg-vmhh"],"status":"published","title":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...","description":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06757,"percentile":0.94018,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2009-03-18T15:00:00Z","modified":"2026-06-16T22:58:04Z","products":[{"vendor":"autonomy","product":"keyview_export_sdk"},{"vendor":"autonomy","product":"keyview_filter_sdk"},{"vendor":"autonomy","product":"keyview_viewer_sdk"},{"vendor":"ibm","product":"lotus_notes"},{"vendor":"symantec","product":"altiris_deployment_solution"},{"vendor":"symantec","product":"brightmail"},{"vendor":"symantec","product":"data_loss_prevention_detection_servers"},{"vendor":"symantec","product":"data_loss_prevention_endpoint_agents"},{"vendor":"symantec","product":"enforce"},{"vendor":"symantec","product":"mail_security"}],"references":[{"url":"http://www.symantec.com/avcenter/security/Content/2009.03.17a.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0744","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34303","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securitytracker.com/id?1021859","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/34307","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49284","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=463\u0026uid=swg21377573","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34318","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1021856","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://securitytracker.com/id?1021857","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/276563","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0756","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/34355","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://osvdb.org/52713","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/34086","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/0757","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4564"},{"url":"https://github.com/advisories/GHSA-6p66-f3jg-vmhh"}],"sources":{"cve":[{"id":"CVE-2008-4564","description":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.","status":"published","published":"2009-03-18T15:00:00Z","modified":"2024-08-07T10:24:18.984Z","updated_at":"2026-11-02T14:34:46.950176Z"}],"euvd":[{"id":"EUVD-2008-4545","description":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.","status":"published","published":"2009-03-18T15:00:00Z","modified":"2024-08-07T10:24:18Z","updated_at":"2026-11-03T01:38:47.367971Z"}],"ghsa":[{"id":"GHSA-6p66-f3jg-vmhh","title":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...","description":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.","status":"published","published":"2022-05-02T00:11:23Z","modified":"2023-01-31T05:07:42Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:49:15.572722Z"}],"nvd":[{"id":"CVE-2008-4564","description":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.","status":"published","published":"2009-03-18T15:30:00.267Z","modified":"2026-06-16T22:58:04.96Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:31.451035Z"}]}}