9.3

CVE-2010-0134

EPSS 4.34%
Published 17.08.2010 20:00:02
Last modified 11.04.2025 00:51:21
Source PSIRT-CNA@flexerasoftware.com
Teams watchlist Login
Open Login

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Autonomy ≫ Keyview Export Sdk Version10.4

Autonomy ≫ Keyview Export Sdk Version10.9

Autonomy ≫ Keyview Filter Sdk Version10.4

Autonomy ≫ Keyview Filter Sdk Version10.9

Autonomy ≫ Keyview Viewer Sdk Version10.4

Autonomy ≫ Keyview Viewer Sdk Version10.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	4.34%	0.878

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www-01.ibm.com/support/docview.wss?uid=swg21440812

http://www.securityfocus.com/bid/41928

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01

http://secunia.com/secunia_research/2010-27/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2010-0134

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0134

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0134

EUVD