CVE-2010-1524

Autonomy KeyView 10.4 and 10.9 - Remote Code Execution via SpreadSheet Lotus 123 Reader

Title source: llm

Description

The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory corruption.

References (4)

Core 4

Core References

Third Party Advisory x_refsource_confirm

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01

Vendor Advisory x_refsource_misc

http://secunia.com/secunia_research/2010-35/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/41928

Various Sources x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21440812

Scores

EPSS 0.0330

EPSS Percentile 87.1%

Details

CWE

CWE-119

Status published

Products (6)

autonomy/keyview_export_sdk 10.4

autonomy/keyview_export_sdk 10.9

autonomy/keyview_filter_sdk 10.4

autonomy/keyview_filter_sdk 10.9

autonomy/keyview_viewer_sdk 10.4

autonomy/keyview_viewer_sdk 10.9

Published Aug 17, 2010

Tracked Since Feb 18, 2026