CVE-2009-3032
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-3032
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Autonomy KeyView OLE文件解析整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
KeyView是用于导出、转换和查看各种格式文件的软件包。 KeyView的kvolefio.dll库在解析OLE文件时，从文件中读取了整数值并未经任何验证，便使用这个值用于计算所要分配的内存数量。如果用户提供了足够大的数值，计算就可能溢出，导致分配不充分的堆缓冲区；软件之后将数据拷贝到了这个缓冲区，造成溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-3032
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-3032
请登录查看更多情报信息。
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812x_refsource_CONFIRM
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858third-party-advisoryx_refsource_IDEFENSE
- https://nvd.nist.gov/vuln/detail/CVE-2009-3032
Same Patch Batch · n/a · 2010-03-05 · 42 CVEs total
| CVE-2010-0927 | IBM Lotus Domino readme.nsf页面远程跨站脚本漏洞 | |
| CVE-2009-4666 | Qualityunit Webradev Download Protect 多个PHP远程文件包含漏洞 | |
| CVE-2009-4667 | Phpmember WebMember 'form.php' SQL注入漏洞 | |
| CVE-2009-4668 | Cowon_America jetAudio 'JetCast.exe' 栈缓冲区溢出漏洞 | |
| CVE-2009-4669 | Beaussier RoomPHPlanning多个SQL注入漏洞 | |
| CVE-2009-4670 | Beaussier RoomPHPlanning 'admin/delitem.php' 授权问题漏洞 | |
| CVE-2009-4671 | Beaussier RoomPHPlanning 'Login.php' 授权问题漏洞 | |
| CVE-2009-4672 | WordPress 插件路径遍历漏洞 | |
| CVE-2009-4673 | Mole Group Adult Portal Script 'profile.php' SQL注入漏洞 | |
| CVE-2009-4674 | Mole Group 'admin/admin.php' 多个远程密码变更漏洞 | |
| CVE-2009-4675 | Mole Group Gastro Portal 'admin/admin_info/index.php' 远程更改密码漏洞 | |
| CVE-2009-4665 | Cutesoft_Components ASP.NET 'CuteSoft_Client/CuteEditor/Load.ashx' 目录遍历漏洞 | |
| CVE-2009-2753 | IBM Informix Dynamic Server ISM Portmapper服务librpc.dll库多个远程溢出漏洞 | |
| CVE-2009-2754 | IBM Informix Dynamic Server librpc.dll库远程栈溢出漏洞 | |
| CVE-2010-0408 | Apache mod_proxy_ajp模块入站请求体远程拒绝服务漏洞 | |
| CVE-2010-0419 | Linux kernel本地拒绝服务和权限提升漏洞 | |
| CVE-2010-0587 | Cisco Unified Communications Manager SCCP报文解析远程拒绝服务漏洞 | |
| CVE-2010-0588 | Cisco Unified Communications Manager SCCP报文解析远程拒绝服务漏洞 | |
| CVE-2010-0590 | Cisco Unified Communications Manager CMSIPUtility组件远程拒绝服务漏洞 | |
| CVE-2010-0591 | Cisco SIP报文解析远程拒绝服务漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2009-3032
No comments yet