CVE:CVE-2008-4564
CNNVD:CNNVD-200903-298
KeyView是用于导出、转换和查看各种格式文件的软件包。
KeyView模块的wp6sr.dll库在处理Word Perfect文档时未经边界检查便将某些记录和数据拷贝到了固定大小的栈缓冲区中，如果用户受骗打开了恶意文档的话就可以触发栈溢出，导致执行任意代码。
solution:Upgrade autonomy keyview_export_sdk to a higher version than 10.4,2.0,9.2.0,10,10.3,and avoid the version (,10.4],2.0,9.2.0,10,10.3; Upgrade autonomy keyview_filter_sdk to a higher version than 10.4,2.0,9.2.0,10,10.3,and avoid the version (,10.4],2.0,9.2.0,10,10.3; Upgrade autonomy keyview_viewer_sdk to a higher version than 10.4,2.0,9.2.0,10,10.3,and avoid the version (,10.4],2.0,9.2.0,10,10.3; Upgrade ibm lotus_notes to a higher version than 5.0.3,5.0.12,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.5,6.5.1,6.5.2,6.5.3,6.5.4,6.5.5,6.5.6,7.0,7.0.1,7.0.2,7.0.3,8.0,and avoid the version 5.0.3,5.0.12,6.0,6.0.1,6.0.2,6.0.3,6.0.4,6.0.5,6.5,6.5.1,6.5.2,6.5.3,6.5.4,6.5.5,6.5.6,7.0,7.0.1,7.0.2,7.0.3,8.0; Upgrade symantec altiris_deployment_solution to a higher version than *; Upgrade symantec brightmail to a higher version than 5.0,and avoid the version 5.0; Upgrade symantec data_loss_prevention_detection_servers to a higher version than 7.0,8.0,8.1,and avoid the version 7.0,8.0,8.1; Upgrade symantec data_loss_prevention_endpoint_agents to a higher version than 8.0,8.1,and avoid the version 8.0,8.1; Upgrade symantec enforce to a higher version than 7.0,8.0,8.1,and avoid the version 7.0,8.0,8.1; Upgrade symantec mail_security to a higher version than 5.0,5.0.0,5.0.0.24,5.0.1,5.0.1.181,5.0.1.182,5.0.1.189,5.0.1.200,5.0.10,5.0.11,6.0.6:microsoft_exchange,6.0.7:microsoft_exchange,7.5..4.29,7.5.3.25,7.5.5.32,and avoid the version 5.0,5.0.0,5.0.0.24,5.0.1,5.0.1.181,5.0.1.182,5.0.1.189,5.0.1.200,5.0.10,5.0.11,6.0.6:microsoft_exchange,6.0.7:microsoft_exchange,7.5..4.29,7.5.3.25,7.5.5.32