CVE-2010-1525
published 2010-08-17CVE-2010-1525: Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products…
PriorityP341critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
3.97%
90.4th percentile
Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autonomy | keyview_export_sdk | — | — |
| autonomy | keyview_export_sdk | — | — |
| autonomy | keyview_filter_sdk | — | — |
| autonomy | keyview_filter_sdk | — | — |
| autonomy | keyview_viewer_sdk | — | — |
| autonomy | keyview_viewer_sdk | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/secunia_research/2010-49/http://www-01.ibm.com/support/docview.wss?uid=swg21440812http://www.securityfocus.com/bid/41928http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01http://secunia.com/secunia_research/2010-49/http://www-01.ibm.com/support/docview.wss?uid=swg21440812http://www.securityfocus.com/bid/41928http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
2010-08-17
Published