Secunia

Secunia Research has discovered some vulnerabilities in Symantec Mail Security for Exchange, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to various errors within the third-party Folio Flat File reader (foliosr.dll) and Applix Graphics reader (kpagrdr.dll) and can be exploited to cause buffer overflows when a specially crafted file is
checked.

For more information:
SA28209

Successful exploitation allows execution of arbitrary code, but requires that e.g. a policy is set up for scanning the contents of messages.

The vulnerabilities are confirmed in Symantec Mail Security for Exchange 5.0.7.373. Other versions may also be affected.

Solution
Disable scanning of message content.

Provided and/or discovered by
Dyon Balding, Secunia Research.

Changelog
Further details available in Customer Area

Original Advisory
SYM08-010:
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.08e.html

Secunia Research:
http://secunia.com/secunia_research/2007-98/
http://secunia.com/secunia_research/2007-105/

Deep Links
Links available in Customer Area