CVE-2010-0134

2010-08-1720:00:02

CWE-189

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.035

Percentile

91.7%

JSON

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.

Affected configurations

Nvd

Node

autonomykeyview_export_sdkMatch10.4

autonomykeyview_export_sdkMatch10.9

autonomykeyview_filter_sdkMatch10.4

autonomykeyview_filter_sdkMatch10.9

autonomykeyview_viewer_sdkMatch10.4

autonomykeyview_viewer_sdkMatch10.9

VendorProductVersionCPE
autonomykeyview_export_sdk10.4cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_export_sdk10.9cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*
autonomykeyview_filter_sdk10.4cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_filter_sdk10.9cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk10.4cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*
autonomykeyview_viewer_sdk10.9cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autonomy	keyview_export_sdk	10.4	cpe:2.3:a:autonomy:keyview_export_sdk:10.4:::::::*
autonomy	keyview_export_sdk	10.9	cpe:2.3:a:autonomy:keyview_export_sdk:10.9:::::::*
autonomy	keyview_filter_sdk	10.4	cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:::::::*
autonomy	keyview_filter_sdk	10.9	cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:::::::*
autonomy	keyview_viewer_sdk	10.4	cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:::::::*
autonomy	keyview_viewer_sdk	10.9	cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:::::::*