CVE-2010-1524

2010-08-1720:00:03

CWE-119

[email protected]

web.nvd.nist.gov

spreadsheet

lotus 123

wkssr.dll

autonomy keyview 10.4

autonomy keyview 10.9

remote attackers

arbitrary code

memory corruption

cve-2010-1524

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and “string indexing,” which triggers memory corruption.

Affected configurations

NVD

Node

autonomykeyview_export_sdkMatch10.4

autonomykeyview_export_sdkMatch10.9

autonomykeyview_filter_sdkMatch10.4

autonomykeyview_filter_sdkMatch10.9

autonomykeyview_viewer_sdkMatch10.4

autonomykeyview_viewer_sdkMatch10.9

CPENameOperatorVersion
autonomy:keyview_export_sdkautonomy keyview export sdkeq10.4
autonomy:keyview_export_sdkautonomy keyview export sdkeq10.9
autonomy:keyview_filter_sdkautonomy keyview filter sdkeq10.4
autonomy:keyview_filter_sdkautonomy keyview filter sdkeq10.9
autonomy:keyview_viewer_sdkautonomy keyview viewer sdkeq10.4
autonomy:keyview_viewer_sdkautonomy keyview viewer sdkeq10.9

CPE	Name	Operator	Version
autonomy:keyview_export_sdk	autonomy keyview export sdk	eq	10.4
autonomy:keyview_export_sdk	autonomy keyview export sdk	eq	10.9
autonomy:keyview_filter_sdk	autonomy keyview filter sdk	eq	10.4
autonomy:keyview_filter_sdk	autonomy keyview filter sdk	eq	10.9
autonomy:keyview_viewer_sdk	autonomy keyview viewer sdk	eq	10.4
autonomy:keyview_viewer_sdk	autonomy keyview viewer sdk	eq	10.9