CVE-2010-0135

2010-08-1720:00:02

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.036

Percentile

91.8%

JSON

Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to “data blocks.”

Affected configurations

Nvd

Node

autonomykeyview_export_sdkMatch10.4

autonomykeyview_export_sdkMatch10.9

autonomykeyview_filter_sdkMatch10.4

autonomykeyview_filter_sdkMatch10.9

autonomykeyview_viewer_sdkMatch10.4

autonomykeyview_viewer_sdkMatch10.9

VendorProductVersionCPE
autonomykeyview_export_sdk10.4cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_export_sdk10.9cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*
autonomykeyview_filter_sdk10.4cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_filter_sdk10.9cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk10.4cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk10.9cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autonomy	keyview_export_sdk	10.4	cpe:2.3:a:autonomy:keyview_export_sdk:10.4:::::::*
autonomy	keyview_export_sdk	10.9	cpe:2.3:a:autonomy:keyview_export_sdk:10.9:::::::*
autonomy	keyview_filter_sdk	10.4	cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:::::::*
autonomy	keyview_filter_sdk	10.9	cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:::::::*
autonomy	keyview_viewer_sdk	10.4	cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:::::::*
autonomy	keyview_viewer_sdk	10.9	cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:::::::*