CVE-2009-3032
HIGH · CVSS 10.0EPSS 3.7%EU EUVD
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
Key facts
- CVSS score
- 10.0 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C- Weakness (CWE)
- CWE-189
- EPSS score
- 3.7% (90th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2009-3016)
- Published
- March 5, 2010
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2009-3016 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- ibm / lotus notes
- symantec / brightmail gateway
- symantec / data loss prevention detection servers
- symantec / data loss prevention detection servers
- symantec / data loss prevention detection servers
- symantec / data loss prevention detection servers
- symantec / data loss prevention detection servers
- symantec / data loss prevention detection servers
- symantec / data loss prevention endpoint agents
- symantec / data loss prevention endpoint agents
- symantec / data loss prevention endpoint agents
- symantec / im manager 2007
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
- symantec / mail security
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858(Exploit)
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.securityfocus.com/bid/38468
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain