CVE-2010-0134 Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyw...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| autonomy keyview export sdk | = 10.4 | No fix listed |
| autonomy keyview export sdk | = 10.9 | No fix listed |
| autonomy keyview filter sdk | = 10.4 | No fix listed |
| autonomy keyview filter sdk | = 10.9 | No fix listed |
| autonomy keyview viewer sdk | = 10.4 | No fix listed |
| autonomy keyview viewer sdk | = 10.9 | No fix listed |
References
- secunia.com vendor-advisory
- www-01.ibm.com
- 41928 vdb-entry
- www.symantec.com