CVE-2008-4564: Autonomy Keyview Export SDK

High severity, CVSS 9.3. EPSS: 6.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

Affected products

• Autonomy Keyview Export SDK: up to and including 10.4; version 2.0 only; version 9.2.0 only; version 10 only; version 10.3 only
• Autonomy Keyview Filter SDK: up to and including 10.4; version 2.0 only; version 9.2.0 only; version 10 only; version 10.3 only
• Autonomy Keyview Viewer SDK: up to and including 10.4; version 2.0 only; version 9.2.0 only; version 10 only; version 10.3 only
• IBM Lotus Notes: version 5.0.3 only; version 5.0.12 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; …
• Symantec Altiris Deployment Solution: any version
• Symantec Brightmail: version 5.0 only
• Symantec Data Loss Prevention Detection Servers: version 7.0 only; version 8.0 only; version 8.1 only
• Symantec Data Loss Prevention Endpoint Agents: version 8.0 only; version 8.1 only
• Symantec Enforce: version 7.0 only; version 8.0 only; version 8.1 only
• Symantec Mail Security: version 5.0 only; version 5.0.0 only; version 5.0.0.24 only; version 5.0.1 only; version 5.0.1.181 only; version 5.0.1.182 only; …

Published 2009-03-18. Last modified 2026-06-16.