CVE-2010-1524

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
2.5%
top 14.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Autonomy Keyview Export SDKAutonomy Keyview Filter SDKAutonomy Keyview Viewer SDK
Timeline
PublishedAug 17
Latest updateMay 17

Description

The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory corruption.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDautonomy/keyview_export_sdk10.4, 10.9+1
▶NVDautonomy/keyview_filter_sdk10.4, 10.9+1
▶NVDautonomy/keyview_viewer_sdk10.4, 10.9+1

🔴Vulnerability Details

2
GHSA
GHSA-2m28-7gpr-ccpm: The SpreadSheet Lotus 123 reader (wkssr↗2022-05-17
▶
CVEList
CVE-2010-1524: The SpreadSheet Lotus 123 reader (wkssr↗2010-08-17
▶
CVE-2010-1524 (CRITICAL CVSS 9.3) | The SpreadSheet Lotus 123 reader (w | cvebase.io