CVEvulnerability
CVE-2010-1524
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory corruption.
Affected configurations
• autonomy keyview export sdk 10.4
• autonomy keyview export sdk 10.9
• autonomy keyview filter sdk 10.4
• autonomy keyview filter sdk 10.9
• autonomy keyview viewer sdk 10.4
• autonomy keyview viewer sdk 10.9
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/secunia_research/2010-35/ Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812 www-01.ibm.com
- http://www.securityfocus.com/bid/41928 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 www.symantec.com
- http://secunia.com/secunia_research/2010-35/ Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812 www-01.ibm.com
- http://www.securityfocus.com/bid/41928 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 www.symantec.com