CVE-2010-1525

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.97%

Published

Aug 17, 2010

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.

Weaknesses (CWE)

CWE-189

Affected Products (6)

autonomy · keyview_export_sdkvulnerable

autonomy · keyview_filter_sdkvulnerable

autonomy · keyview_viewer_sdkvulnerable

References (8)

http://secunia.com/secunia_research/2010-49/

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21440812

http://www.securityfocus.com/bid/41928

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01