9.3

CVE-2010-1525

EPSS 2.58%
Published 17.08.2010 20:00:03
Last modified 11.04.2025 00:51:21
Source PSIRT-CNA@flexerasoftware.com
Teams watchlist Login
Open Login

Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Autonomy ≫ Keyview Export Sdk Version10.4

Autonomy ≫ Keyview Export Sdk Version10.9

Autonomy ≫ Keyview Filter Sdk Version10.4

Autonomy ≫ Keyview Filter Sdk Version10.9

Autonomy ≫ Keyview Viewer Sdk Version10.4

Autonomy ≫ Keyview Viewer Sdk Version10.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.58%	0.842

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www-01.ibm.com/support/docview.wss?uid=swg21440812

http://www.securityfocus.com/bid/41928

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01

http://secunia.com/secunia_research/2010-49/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2010-1525

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-1525

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-1525

EUVD