CVE-2010-1525

2010-08-1720:00:03

CWE-189

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.036

Percentile

91.8%

JSON

Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.

Affected configurations

Nvd

Node

autonomykeyview_export_sdkMatch10.4

autonomykeyview_export_sdkMatch10.9

autonomykeyview_filter_sdkMatch10.4

autonomykeyview_filter_sdkMatch10.9

autonomykeyview_viewer_sdkMatch10.4

autonomykeyview_viewer_sdkMatch10.9

VendorProductVersionCPE
autonomykeyview_export_sdk10.4cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_export_sdk10.9cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*
autonomykeyview_filter_sdk10.4cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_filter_sdk10.9cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk10.4cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk10.9cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autonomy	keyview_export_sdk	10.4	cpe:2.3:a:autonomy:keyview_export_sdk:10.4:::::::*
autonomy	keyview_export_sdk	10.9	cpe:2.3:a:autonomy:keyview_export_sdk:10.9:::::::*
autonomy	keyview_filter_sdk	10.4	cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:::::::*
autonomy	keyview_filter_sdk	10.9	cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:::::::*
autonomy	keyview_viewer_sdk	10.4	cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:::::::*
autonomy	keyview_viewer_sdk	10.9	cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:::::::*