Autonomy KeyView Filter 'Text' Chunk Integer Overflow Vulnerability

Bugtraq ID:	49899
Class:	Boundary Condition Error
CVE:	CVE-2011-0338
Remote:	Yes
Local:	No
Published:	Oct 05 2011 12:00AM
Updated:	Mar 19 2015 09:43AM
Credit:	Secunia Research
Vulnerable:	Symantec Messaging Gateway 9.5 Symantec Message Gateway 9.5 Symantec Mail Security for Microsoft Exchange 6.5.1 Symantec Mail Security for Microsoft Exchange 6.5 Symantec Mail Security for Microsoft Exchange 6.0.11 Symantec Mail Security for Microsoft Exchange 6.0.10 Symantec Mail Security for Microsoft Exchange 6.0.9 Symantec Mail Security for Microsoft Exchange 6.0.8 Symantec Mail Security for Microsoft Exchange 6.0.7 Symantec Mail Security for Microsoft Exchange 6.0.6 Symantec Mail Security for Microsoft Exchange 6.0.5 Symantec Mail Security for Microsoft Exchange 6.0 Symantec Mail Security for Microsoft Exchange 6.5.5 Symantec Mail Security for Microsoft Exchange 6.0.12 Symantec Mail Security for Microsoft Exchange 6.0.0.1 Symantec Mail Security for Domino 8.0.6 Symantec Mail Security for Domino 8.0.3 Symantec Mail Security for Domino 8.0.2 Symantec Mail Security for Domino 8.0.1 Symantec Mail Security for Domino 7.5.10 Symantec Mail Security for Domino 7.5.9 Symantec Mail Security for Domino 7.5.8 Symantec Mail Security for Domino 7.5.7 Symantec Mail Security for Domino 7.5.6 Symantec Mail Security for Domino 7.5.3 25 Symantec Mail Security for Domino 8.0.8 Symantec Mail Security for Domino 8.0 Symantec Mail Security for Domino 7.5.5.32 Symantec Mail Security for Domino 7.5.4.29 Symantec Mail Security for Domino 7.5.3.25 Symantec Mail Security for Domino 7.5.11 Symantec Mail Security for Domino 7.5.0.19 Symantec Mail Security for Domino 7.5 Symantec Data Loss Prevention Endpoint Agents 10.5.1 Symantec Data Loss Prevention Endpoint Agents 10.0.1010 .18007 Symantec Data Loss Prevention Endpoint Agents 11.1 Symantec Data Loss Prevention Endpoint Agents 11.0 Symantec Data Loss Prevention Endpoint Agents 10.5.3 Symantec Data Loss Prevention Endpoint Agents 10.5 Symantec Data Loss Prevention Endpoint Agents 10.0 Symantec Data Loss Prevention Detection Servers for Windows 10.5.1 Symantec Data Loss Prevention Detection Servers for Windows 10.0.1010 .18007 Symantec Data Loss Prevention Detection Servers for Windows 11.1 Symantec Data Loss Prevention Detection Servers for Windows 11.0 Symantec Data Loss Prevention Detection Servers for Windows 10.5.3 Symantec Data Loss Prevention Detection Servers for Windows 10.5 Symantec Data Loss Prevention Detection Servers for Windows 10.0 Symantec Data Loss Prevention Detection Servers for Linux 10.5.1 Symantec Data Loss Prevention Detection Servers for Linux 10.0.1010 .18007 Symantec Data Loss Prevention Detection Servers for Linux 11.1 Symantec Data Loss Prevention Detection Servers for Linux 11.0 Symantec Data Loss Prevention Detection Servers for Linux 10.5.3 Symantec Data Loss Prevention Detection Servers for Linux 10.5 Symantec Data Loss Prevention Detection Servers for Linux 10.0 Symantec Data Loss Prevention Agent Server 10.0 Symantec Brightmail Gateway 8300 Series Appliance 0 Symantec Brightmail Gateway 9.0.2 Symantec Brightmail Gateway 8.0.2 Symantec Brightmail Gateway 8.0.1 Symantec Brightmail Gateway 9.5 Symantec Brightmail Gateway 9.0 Symantec Brightmail Gateway 8.0 Symantec Brightmail and Messaging Gateway 9.5 IBM Lotus Notes 8.5.2 IBM Lotus Notes 8.5.1 IBM Lotus Notes 7.0.3 IBM Lotus Notes 7.0.2 IBM Lotus Notes 7.0.1 IBM Lotus Notes 6.5.6 IBM Lotus Notes 6.5.5 IBM Lotus Notes 6.5.4 IBM Lotus Notes 6.5.3 IBM Lotus Notes 6.5.2 IBM Lotus Notes 6.5.1 IBM Lotus Notes 6.5 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0 IBM Lotus Notes 7.0.2 FP2 IBM Lotus Notes 7.0.2 FP1 IBM Lotus Notes 7.0 IBM Lotus Notes 6.5.6 FP2 IBM Lotus Notes 6.5.5 FP3 IBM Lotus Notes 6.5.5 FP2 IBM Lotus Notes 6.5.2 FP1 Autonomy Keyview Viewer SDK 10.4 Autonomy Keyview Viewer SDK 10.3 Autonomy Keyview Viewer SDK 9.2 Autonomy Keyview Viewer SDK 10.9 Autonomy Keyview Viewer SDK 10.8 Autonomy Keyview Viewer SDK 10.5 Autonomy Keyview Viewer SDK 10.12 Autonomy Keyview Viewer SDK 10.11 Autonomy Keyview Viewer SDK 10.10 Autonomy Keyview Viewer SDK 10 Autonomy Keyview Filter SDK 10.9 Autonomy Keyview Filter SDK 10.4 Autonomy Keyview Filter SDK 10.3 Autonomy Keyview Filter SDK 9.2 Autonomy Keyview Filter SDK 10.8 Autonomy Keyview Filter SDK 10.5 Autonomy Keyview Filter SDK 10.12 Autonomy Keyview Filter SDK 10.11 Autonomy Keyview Filter SDK 10.10 Autonomy Keyview Filter SDK 10 Autonomy Keyview Export SDK 9.2
Not Vulnerable:	Symantec Messaging Gateway 9.5.1 Symantec Messaging Gateway 9.5.1 Symantec Mail Security for Microsoft Exchange 6.5.6 Symantec Mail Security for Microsoft Exchange 6.0.13 Symantec Mail Security for Domino 8.0.9 Symantec Mail Security for Domino 7.5.12 Symantec Data Loss Prevention Servers for Windows 11.1.1 Symantec Data Loss Prevention Servers for Linux 11.1.1 Symantec Data Loss Prevention Endpoint Agents 11.1.1 Symantec Brightmail Gateway 9.5.1

Autonomy KeyView Filter 'Text' Chunk Integer Overflow Vulnerability

Autonomy KeyView Filter is prone to an integer-overflow vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious Ichitaro file or email attachment.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts may result in a denial-of-service condition.

Autonomy KeyView Filter 'Text' Chunk Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]. [email protected].

• /data/vulnerabilities/exploits/48018.rb

Autonomy KeyView Filter 'Text' Chunk Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Autonomy KeyView Filter 'Text' Chunk Integer Overflow Vulnerability

References:

• IBM Lotus Notes Homepage (IBM)
  
• KeyView Homepage (Autonomy)
  
• Secunia Research: Autonomy Keyview Ichitaro Text Parsing Buffer Overflow (Secunia)
  
• Security Advisories Relating to Symantec Products - Multi-Vendor Autonomy Verity (Symantec)