CVEvulnerability
CVE-2010-1525
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.
Affected configurations
• autonomy keyview export sdk 10.4
• autonomy keyview export sdk 10.9
• autonomy keyview filter sdk 10.4
• autonomy keyview filter sdk 10.9
• autonomy keyview viewer sdk 10.4
• autonomy keyview viewer sdk 10.9
Related
Weakness · not in database (1)
References
- http://secunia.com/secunia_research/2010-49/ Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812 www-01.ibm.com
- http://www.securityfocus.com/bid/41928 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 www.symantec.com
- http://secunia.com/secunia_research/2010-49/ Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812 www-01.ibm.com
- http://www.securityfocus.com/bid/41928 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 www.symantec.com