Title

Multiple Vulnerabilities in Autonomy Keyview affecting Symantec Products (Cat I impact)

Discussion

Symantec has released a security advisory addressing multiple vulnerabilities in the Autonomy KeyView module affecting Symantec products. Autonomy KeyView is a commercial Software Development Kit (SDK) that provides file format parsing libraries. To exploit these vulnerabilities,an attacker would craft and send a malicious file via email and entice a user to open the file. If successfully exploited, these vulnerabilities would allow an attacker to execute arbitrary code, gain elevated privileges, or cause a denial-of-service condition resulting in the compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-35052

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.