469 matches found
Integer overflow
Integer underflow in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted size for an unspecified record typ...
CVE-2010-1525
CVE-2010-1525 affects Autonomy KeyView 10.4 and 10.9, specifically the SpreadSheet Lotus 123 reader (wkssr.dll). The vulnerability is an integer underflow during parsing of a record type size, which can trigger a heap-based buffer overflow. This may lead to a denial of service and potentially arb...
CVE-2010-1525
Integer underflow in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted size for an unspecified record typ...
CVE-2010-0134
CVE-2010-0134 : A signedness error in Autonomy KeyView’s rtfsr.dll (versions 10.4 and 10.9) allows remote code execution when processing the RTF \ls keyword in a list override table entry, triggering a buffer overflow. Affected products are used in various IBM, Symantec, and other bundles. Impact...
CVE-2010-0135
CVE-2010-0135 affects Autonomy KeyView’s WordPerfect 5.x reader (wosr.dll). The vulnerability is a heap-based buffer overflow in the data block parsing path, caused by a boundary error when processing data blocks. Impact: remote code execution via crafted files, with affected KeyView versions inc...
CVE-2010-0135
Heap-based buffer overflow in the WordPerfect 5.x reader wosr.dll, as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."...
CVE-2010-0126
CVE-2010-0126 affects Autonomy KeyView 10.4 and 10.9. The vulnerability is a heap-based buffer overflow in a KeyView component/library used by multiple products (e.g., IBM, Symantec) that processes compound documents. An attacker could trigger code execution by supplying a specially crafted compo...
CVE-2010-1524
Autonomy KeyView (SpreadSheet Lotus 123 reader wkssr.dll) is affected in KeyView versions 10.4 and 10.9, where the SpreadSheet parser can trigger memory corruption via allocation of an array of pointers and string indexing, allowing remote code execution. The vulnerability affects software using ...
CVE-2010-0133
CVE-2010-0133 involves multiple stack-based and memory corruption vulnerabilities in Autonomy KeyView’s SpreadSheet Lotus 123 reader (wkssr.dll), affecting KeyView 10.4 and 10.9. The flaws arise from boundary/overflow conditions when parsing certain records, allowing remote attackers to execute a...
CVE-2010-1524
The SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory...
CVE-2010-0131
CVE-2010-0131 describes a stack-based buffer overflow in the Spreadsheet Lotus 123 reader (wkssr.dll), affecting Autonomy KeyView 10.4 and 10.9 (and related products). The vulnerability stems from a boundary/float conversion issue in certain record types, enabling remote attackers to execute arbi...
CVE-2010-0133
Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."...
CVE-2010-0126
Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by...
CVE-2010-0134: Undefined Security Weakness
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow...
CVE-2010-0126: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by...
CVE-2010-0133: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."...
CVE-2010-1524: Improper Restriction of Operations within the Bounds of a Memory Buffer
The SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory...
CVE-2010-0131: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the SpreadSheet Lotus 123 reader wkssr.dll, as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown reco...
CVE-2010-0135: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the WordPerfect 5.x reader wosr.dll, as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."...
CVE-2010-1525: Undefined Security Weakness
Integer underflow in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted size for an unspecified record typ...