Heap-based buffer overflow in xlssr.dll in Autonomy KeyView as used in IBM Lotus Notes before 8.5.2 FP3 allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment aka SPR PRAD8E3HKR.