Title: Autonomy KeyView SDK wp6sr.dll Word Perfect Document Handling Overflow
Info
Disclosure
Mar 17, 2009
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Mar 17, 2009
Description
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Patch / RCS
Exploit:
Exploit Private
Disclosure:
Vendor Verified
Solution
IBM, Symantec, and Autonomy have released patches to address this vulnerability. Additionally, it is possible to temporarily work around the flaw by implementing the following workaround: For Lotus Notes, it is possible to disable the processing of WPD files by removing, or commenting out, the line referencing "wp6sr.dll" from the "KeyView.ini" file within the Lotus Notes program directory. Deleting "wp6sr.dll" from the affected system will also prevent exploitation.
For Symantec Mail Security, disabling "content filtering" will prevent exploitation.