Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	41928
Class:	Boundary Condition Error
CVE:	CVE-2010-0126 CVE-2010-0133 CVE-2010-0134 CVE-2010-0135 CVE-2010-0131 CVE-2010-1524 CVE-2010-1525
Remote:	Yes
Local:	No
Published:	Jul 27 2010 12:00AM
Updated:	Mar 19 2015 08:13AM
Credit:	Carsten Eiram, Secunia Research and Dyon Balding, Secunia Research.
Vulnerable:	Symantec Mail Security for SMTP 5.0.1 Patch 189 Symantec Mail Security for SMTP 5.0.1 Patch 182 Symantec Mail Security for SMTP 5.0.1 Patch 181 Symantec Mail Security for SMTP 5.0.1 Symantec Mail Security for SMTP 5.0 Symantec Mail Security for Microsoft Exchange 6.5 Symantec Mail Security for Microsoft Exchange 6.0.10 Symantec Mail Security for Microsoft Exchange 6.0.9 Symantec Mail Security for Microsoft Exchange 6.0.8 Symantec Mail Security for Microsoft Exchange 6.0.7 Symantec Mail Security for Microsoft Exchange 6.0.6 Symantec Mail Security for Microsoft Exchange 6.0.5 Symantec Mail Security for Domino 8.0.3 Symantec Mail Security for Domino 8.0.2 Symantec Mail Security for Domino 8.0.1 Symantec Mail Security for Domino 7.5.9 Symantec Mail Security for Domino 7.5.8 Symantec Mail Security for Domino 7.5.7 Symantec Mail Security for Domino 7.5.6 Symantec Mail Security for Domino 7.5.3 25 Symantec Mail Security for Domino 8.0 Symantec Mail Security for Domino 7.5.5.32 Symantec Mail Security for Domino 7.5.4.29 Symantec Mail Security for Domino 7.5.3.25 Symantec Mail Security for Domino 7.5.0.19 Symantec Mail Security for Domino 7.5 Symantec Mail Security Appliance 7.5 Symantec IM Manager 8.4.13 Symantec IM Manager 8.4 Symantec Data Loss Prevention Endpoint Agents 10.0.1010 .18007 Symantec Data Loss Prevention Endpoint Agents 9.0.18 7 Symantec Data Loss Prevention Endpoint Agents 9.0.3 Symantec Data Loss Prevention Endpoint Agents 9.0.2 Symantec Data Loss Prevention Endpoint Agents 9.0.1 Symantec Data Loss Prevention Endpoint Agents 8.1.10 1 Symantec Data Loss Prevention Endpoint Agents 8.1.10 .9 Symantec Data Loss Prevention Endpoint Agents 8.1.1 Symantec Data Loss Prevention Endpoint Agents 8.1.6.2 Symantec Data Loss Prevention Endpoint Agents 10.5 Symantec Data Loss Prevention Endpoint Agents 10.0 Symantec Data Loss Prevention Detection Servers for Windows 10.0.1010 .18007 Symantec Data Loss Prevention Detection Servers for Windows 9.0.18 5 Symantec Data Loss Prevention Detection Servers for Windows 9.0.3 Symantec Data Loss Prevention Detection Servers for Windows 9.0.2 Symantec Data Loss Prevention Detection Servers for Windows 9.0.1 Symantec Data Loss Prevention Detection Servers for Windows 8.1.10 1 Symantec Data Loss Prevention Detection Servers for Windows 8.1.10 .8 Symantec Data Loss Prevention Detection Servers for Windows 8.1.1 Symantec Data Loss Prevention Detection Servers for Windows 8.1.5.15 Symantec Data Loss Prevention Detection Servers for Windows 10.5 Symantec Data Loss Prevention Detection Servers for Windows 10.0 Symantec Data Loss Prevention Detection Servers for Linux 10.0.1010 .18007 Symantec Data Loss Prevention Detection Servers for Linux 9.0.18 5 Symantec Data Loss Prevention Detection Servers for Linux 9.0.3 Symantec Data Loss Prevention Detection Servers for Linux 9.0.2 Symantec Data Loss Prevention Detection Servers for Linux 9.0.1 Symantec Data Loss Prevention Detection Servers for Linux 8.1.10 1 Symantec Data Loss Prevention Detection Servers for Linux 8.1.10 .8 Symantec Data Loss Prevention Detection Servers for Linux 8.1.1 Symantec Data Loss Prevention Detection Servers for Linux 8.1.5.15 Symantec Data Loss Prevention Detection Servers for Linux 10.5 Symantec Data Loss Prevention Detection Servers for Linux 10.0 IBM Lotus Notes 8.5.1 IBM Lotus Notes 6.5.6 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0 Autonomy Keyview Viewer SDK 10.4 Autonomy Keyview Viewer SDK 10.3 Autonomy Keyview Viewer SDK 10 Autonomy Keyview Filter SDK 10.9 Autonomy Keyview Filter SDK 10.4 Autonomy Keyview Filter SDK 10.3 Autonomy Keyview Filter SDK 10 Autonomy Keyview Export SDK 10.4 Autonomy Keyview Export SDK 10.3 Autonomy Keyview Export SDK 10
Not Vulnerable:	Symantec Mail Security for Microsoft Exchange 6.5.1 Symantec Mail Security for Microsoft Exchange 6.0.11 Symantec Mail Security for Domino 8.0.6 Symantec Mail Security for Domino 7.5.10 Symantec Mail Security Appliance 7.5.0-18 Symantec IM Manager 8.4.15 Symantec Data Loss Prevention Endpoint Agents 10.5.1 Symantec Data Loss Prevention Detection Servers for Windows 10.5.1 Symantec Data Loss Prevention Detection Servers for Linux 10.5.1 Symantec Brightmail Gateway 9.0.2

Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities

Autonomy KeyView Filter module is prone to multiple memory-corruption vulnerabilities because it fails to adequately validate user-supplied data.

Exploiting these issues will allow an attacker to corrupt memory and to cause denial-of-service conditions or potentially to execute arbitrary code in the context of the application using the module.

Multiple products using the KeyView module are affected.

Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities

Core Security Technologies has developed a working commercial exploit for CVE-2010-0133 for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities

Solution:
The vendor has released updates to address these issues. Please see the references for more information.

Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities

References:

• IBM Lotus Notes Homepage (IBM)
  
• KeyView Homepage (Autonomy)
  
• Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow (Secunia)
  
• Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error (Secunia)
  
• Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability (IBM)
  
• Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows (Secunia)
  
• Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability (Secunia)
  
• Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow (Secunia)
  
• Symantec Homepage (Symantec)
  
• ZDI-10-157: IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Ex (Zero Day Initiative)
  
• ZDI-10-158: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution V (Zero Day Initiative)
  
• ZDI-10-159: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution V (Zero Day Initiative)
  
• (July 2010) Fixes for potential security vulnerabilities in Lotus Notes file vie (IBM)
  
• Security Advisories Relating to Symantec Products - Multi-Vendor Autonomy KeyVie (Symantec)
  
• ZDI-10-156: IBM Lotus Notes Autonomy KeyView Word Parsing Remote Code Execution (Zero Day Initiative)