----------------------------------------------------------------------

Did you know? Our assessment and impact rating along with detailed
information such as exploit code availability, or if an updated patch
is released by the vendor, is not part of this mailing-list?
        
Click here to learn more about our commercial solutions:
http://secunia.com/advisories/business_solutions/
        
Click here to trial our solutions:
http://secunia.com/advisories/try_vi/

----------------------------------------------------------------------

TITLE:
Symantec Products KeyView Module Buffer Overflow

SECUNIA ADVISORY ID:
SA34307

VERIFY ADVISORY:
http://secunia.com/advisories/34307/

DESCRIPTION:
A vulnerability has been reported in various Symantec products, which
can potentially be exploited by malicious people to compromise a
vulnerable system.

The vulnerability is caused due to an unspecified error within the
Autonomy KeyView module, which can be exploited to cause a buffer
overflow.

Successful exploitation may allow execution of arbitrary code.

The vulnerability affects the following products and versions:
* Symantec Mail Security for Domino  7.5.5.32, 7.5.4.29, and 7.5.3.25
* Symantec Mail Security for Microsoft Exchange 5.0.11, 5.0.10
* Symantec Mail Security for Microsoft Exchange 6.0.7, 6.0.6
* Symantec Mail Security for SMTP 5.0.x
* Symantec Mail Security Appliance/ Symantec BrightMail
Appliance  5.0.x and later
* Symantec BrightMail Appliance All versions
* Symantec Data Loss Prevention Detection Servers/Enforce 7.x
* Symantec Data Loss Prevention Detection Servers/Enforce 8.0
* Symantec Data Loss Prevention Endpoint Agents 8.0
* Symantec Data Loss Prevention Detection Servers/Enforce for Windows
8.1.x
* Symantec Data Loss Prevention Detection Servers/Enforce for Linux
8.1.x
* Symantec Data Loss Prevention Endpoint Agents 8.1.x

SOLUTION:
Please see the vendor advisory for a patch matrix.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits iDefense.

ORIGINAL ADVISORY:
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17a.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------