CVE-2010-0135

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
4.6%
top 10.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Autonomy Keyview Export SDKAutonomy Keyview Filter SDKAutonomy Keyview Viewer SDK
Timeline
PublishedAug 17
Latest updateMay 2

Description

Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDautonomy/keyview_export_sdk10.4, 10.9+1
▶NVDautonomy/keyview_filter_sdk10.4, 10.9+1
▶NVDautonomy/keyview_viewer_sdk10.4, 10.9+1

🔴Vulnerability Details

2
GHSA
GHSA-3xj7-5rr9-482h: Heap-based buffer overflow in the WordPerfect 5↗2022-05-02
▶
CVEList
CVE-2010-0135: Heap-based buffer overflow in the WordPerfect 5↗2010-08-17
▶
CVE-2010-0135 (CRITICAL CVSS 9.3) | Heap-based buffer overflow in the W | cvebase.io