VULNERABILITY INTELLIGENCE

CVE-2009-3037

CVSS score9.3 NONE
EPSS probability5.72%
CISA KEVNot currently listed
Published2009-09-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment.

Weakness classification

  • nvd@nist.gov: CWE-119

Primary references