9.3

CVE-2010-0134

EPSS 4.34%
Veröffentlicht 17.08.2010 20:00:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle PSIRT-CNA@flexerasoftware.com
Teams Watchlist Login
Unerledigt Login

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Autonomy ≫ Keyview Export Sdk Version10.4

Autonomy ≫ Keyview Export Sdk Version10.9

Autonomy ≫ Keyview Filter Sdk Version10.4

Autonomy ≫ Keyview Filter Sdk Version10.9

Autonomy ≫ Keyview Viewer Sdk Version10.4

Autonomy ≫ Keyview Viewer Sdk Version10.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.34%	0.878

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www-01.ibm.com/support/docview.wss?uid=swg21440812

http://www.securityfocus.com/bid/41928

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01

http://secunia.com/secunia_research/2010-27/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2010-0134

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0134

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0134

EUVD