CVE-2009-3032: ibm lotus_notes Numeric Errors
Vulnerability summary
CVE-2009-3032 is a high (CVSS 10.0) Numeric Errors vulnerability in ibm lotus_notes. EPSS estimates a 3.74% chance of exploitation in the next 30 days, higher than 89.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 05-03-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.74%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.74% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (labs.idefense.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Symantec4 products
- brightmail_gateway8.0
- data_loss_prevention_detection_servers8.1.1 | 9.0.1 | 10.0
- data_loss_prevention_endpoint_agents8.1.1 | 9.0.1 | 10.0
- mail_security5.0.0 | 5.0.1.181 | 5.0.1.182 | 5.0.1.189 | 5.0.11 | 5.0.12 | 5.0.13 | 6.0.6 | 6.0.7 | 6.0.8 | 7.5.3.25 | 7.5.4.29 | 7.5.5.32 | 7.5.6 | 7.5.7 | 7.5.8 | 8.0 | 8.0.1 | 8.0.2
Ibm1 product
- lotus_notes8.5
2 vendors · 5 products
References
4 links- www.symantec.com/security_response/…X Refsource CONFIRM
- labs.idefense.com/intelligence/vulnerabilities/display.php?id=858Third Party AdvisoryX Refsource IDEFENSEExploit
- www-01.ibm.com/support/docview.wss?uid=swg21440812X Refsource CONFIRM