CVE:CVE-2009-3032
CNNVD:CNNVD-201003-053
KeyView是用于导出、转换和查看各种格式文件的软件包。
KeyView的kvolefio.dll库在解析OLE文件时，从文件中读取了整数值并未经任何验证，便使用这个值用于计算所要分配的内存数量。如果用户提供了足够大的数值，计算就可能溢出，导致分配不充分的堆缓冲区；软件之后将数据拷贝到了这个缓冲区，造成溢出。
solution:Upgrade ibm lotus_notes to a higher version than 8.5,and avoid the version 8.5; Upgrade symantec brightmail_gateway to a higher version than 8.0,and avoid the version 8.0; Upgrade symantec data_loss_prevention_detection_servers to a higher version than 8.1.1,9.0.1,10.0,and avoid the version 8.1.1,9.0.1,10.0; Upgrade symantec data_loss_prevention_endpoint_agents to a higher version than 8.1.1,9.0.1,10.0,and avoid the version 8.1.1,9.0.1,10.0; Upgrade symantec im_manager_2007 to a higher version than *; Upgrade symantec mail_security to a higher version than 5.0.0,5.0.1.181,5.0.1.182,5.0.1.189,5.0.11,5.0.12,5.0.13,6.0.6,6.0.7,6.0.8,7.5.3.25,7.5.4.29,7.5.5.32,7.5.6,7.5.7,7.5.8,8.0,8.0.1,8.0.2,and avoid the version 5.0.0,5.0.1.181,5.0.1.182,5.0.1.189,5.0.11,5.0.12,5.0.13,6.0.6,6.0.7,6.0.8,7.5.3.25,7.5.4.29,7.5.5.32,7.5.6,7.5.7,7.5.8,8.0,8.0.1,8.0.2