CVE-2009-3032
Estado: ModificadaAlta (10)—
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.74%
- Percentil entre todas las CVEs puntuadas: 90
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (6)
CWE
- CWE-189
Referencias
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.securityfocus.com/bid/38468
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.securityfocus.com/bid/38468
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-3032",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-03-05T19:30:00.313",
"references": [
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21440812",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/38468",
"source": "cve@mitre.org"
},
{
"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00",
"source": "cve@mitre.org"
},
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21440812",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/38468",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow."
},
{
"lang": "es",
"value": "Desbordamiento de entero en kvolefio.dll v8.5.0.8339 y v10.5.0.0 en Autonomy KeyView Filter SDK, tal y como se utiliza en IBM Lotus Notes v8.5, Symantec Mail Security para Microsoft Exchange desde v5.0.10 hasta v5.0.13, y otros productos, permite a atacantes dependientes del contexto ejecutar codigo arbitrario a traves de documentos OLE que inicianun desbordamiento de memoria dinamica."
}
],
"lastModified": "2026-06-16T23:10:46.070",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0119A252-73B1-490F-9371-06E8FDB8B979"
},
{
"criteria": "cpe:2.3:a:symantec:brightmail_gateway:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EAF9163-1511-4424-8019-9868D0C4D0C9"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1.1:*:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D804B423-8990-497F-9FB8-86E3D06F4F70"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A13CD3B-0529-43E4-A4F8-96B5180B0DA3"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:9.0.1:*:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D92BC1D-E75F-420E-A2DB-DBFC07508A2B"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:9.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED4D0804-7AE2-45D6-AAD5-F70C14354BBF"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:10.0:*:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A06E56E-5DE3-4EA2-90BC-366EBC4283A1"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_detection_servers:10.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9EAB6C2-F8A1-42BD-A8C8-A8D7017606E3"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14920820-3D26-4AC4-839E-531ABA6933A5"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:9.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA274AFE-D535-4683-964A-FBCBF2D1291E"
},
{
"criteria": "cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA2A7B74-D51B-4A59-9A41-2963247C3C39"
},
{
"criteria": "cpe:2.3:a:symantec:im_manager_2007:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "526474D6-9084-4F53-9172-8C9C7BB5FE01"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E7788BD-652E-4306-AED0-6AE7F9A07836"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.1.181:*:smtp:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D602A441-863D-4E90-A01D-57C41725D008"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.1.182:*:smtp:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A792A9C1-95EF-4CE2-B14F-3DEE09BFAF8A"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.1.189:*:smtp:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D9C7B86-7F9A-4DF8-A4DF-9A7CA5991D91"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.11:*:microsoft_exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95D5B1CF-6C20-4D66-9D30-631441FA953B"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.12:*:microsoft_exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "868EFAF0-F5FA-46EB-99CC-19C1DAF06954"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:5.0.13:*:microsoft_exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16BE9C8A-A8AF-43FF-B4D9-07F57E226385"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:6.0.6:*:microsoft_exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0026CDBB-92E2-45DE-9637-F18224CE3E6C"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:6.0.7:*:microsoft_exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12AC5934-DAC3-4866-B31F-71EC14F42CED"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:6.0.8:*:microsoft_exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7604B25-6AA0-4814-A8D4-780811A247B6"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:7.5.3.25:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07FADB30-A418-43C5-A798-4769C5350E7B"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:7.5.4.29:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EAB0E10-A62F-42DB-BA86-FBFCFCF0E13D"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:7.5.5.32:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70F1A708-9914-4875-B594-D8A9D65182D8"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:7.5.6:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D04308D-D372-4760-B67F-A25DEEDF52E8"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:7.5.7:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F15656D0-F6A6-43EE-86AF-2263B49FFA75"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:7.5.8:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E8F8098-9697-4536-B8C6-6224D9A1C6F6"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:8.0:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ABC5ED9-168A-4420-9286-179345BD89DD"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:8.0.1:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6A7646A-74D8-4BA6-BE5C-06A55CB3CECC"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:8.0.2:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6193ECEF-1412-4887-98FD-F37122897AC6"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}