Vulnerability in Autonomy Keyview Export Sdk

CVE-2010-1525

Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.

EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.

Affected products

Autonomy Keyview_export_sdk — versions 10.9, 10.4
Autonomy Keyview_filter_sdk — versions 10.9, 10.4
Autonomy Keyview_viewer_sdk — versions 10.9, 10.4
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)