CVE-2010-0131: Buffer Overflow
First published: Tue Aug 17 2010(Updated: )
Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Autonomy KeyView | =10.4 | |
| Autonomy KeyView | =10.9 | |
| Autonomy KeyView | =10.4 | |
| Autonomy KeyView | =10.9 | |
| Autonomy KeyView | =10.4 | |
| Autonomy KeyView | =10.9 | |
| Symantec Mail Security |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/secunia_research/2010-23/
- http://secunia.com/secunia_research/2010-25/
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.securityfocus.com/bid/41928
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
Frequently Asked Questions
What is the severity of CVE-2010-0131?
CVE-2010-0131 is rated as a critical severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2010-0131?
To fix CVE-2010-0131, update affected software to the latest version that addresses the vulnerability.
Which software products are affected by CVE-2010-0131?
CVE-2010-0131 affects Autonomy KeyView versions 10.4 and 10.9, as well as Symantec Mail Security.
What type of vulnerability is CVE-2010-0131?
CVE-2010-0131 is a stack-based buffer overflow vulnerability.
Can CVE-2010-0131 be exploited remotely?
Yes, CVE-2010-0131 can be exploited by remote attackers through unspecified vectors.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/autonomy
- canonical/autonomy keyview
- version/autonomy keyview/10.4
- version/autonomy keyview/10.9
- vendor/symantec
- canonical/symantec mail security