CVE-2010-0131

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
6.1%
top 9.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Autonomy Keyview Export SDKAutonomy Keyview Filter SDKAutonomy Keyview Viewer SDK
Timeline
PublishedAug 17
Latest updateMay 2

Description

Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDautonomy/keyview_export_sdk10.4, 10.9+1
▶NVDautonomy/keyview_filter_sdk10.4, 10.9+1
▶NVDautonomy/keyview_viewer_sdk10.4, 10.9+1

🔴Vulnerability Details

2
GHSA
GHSA-jqw9-9p4w-5g4f: Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr↗2022-05-02
▶
CVEList
CVE-2010-0131: Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr↗2010-08-17
▶
CVE-2010-0131 (CRITICAL CVSS 9.3) | Stack-based buffer overflow in the | cvebase.io