CVE-2009-3032: IBM Lotus Notes

High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.

Affected products

• IBM Lotus Notes: version 8.5 only
• Symantec Brightmail Gateway: version 8.0 only
• Symantec Data Loss Prevention Detection Servers: version 8.1.1 only; version 9.0.1 only; version 10.0 only
• Symantec Data Loss Prevention Endpoint Agents: version 8.1.1 only; version 9.0.1 only; version 10.0 only
• Symantec Im Manager 2007: any version
• Symantec Mail Security: version 5.0.0 only; version 5.0.1.181 only; version 5.0.1.182 only; version 5.0.1.189 only; version 5.0.11 only; version 5.0.12 only; …

Published 2010-03-05. Last modified 2026-06-16.