CVE-2010-0134: Buffer Overflow
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0134?
CVE-2010-0134 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2010-0134?
To mitigate CVE-2010-0134, you should upgrade to a patched version of Autonomy KeyView 10.4 or 10.9 that addresses the buffer overflow vulnerability.
What software is affected by CVE-2010-0134?
CVE-2010-0134 affects Autonomy KeyView versions 10.4 and 10.9, including its various SDKs integrated into multiple products.
How does CVE-2010-0134 exploit work?
The exploitation of CVE-2010-0134 occurs through a crafted RTF file that triggers a buffer overflow via a malicious \ls keyword in a list override table entry.
Can CVE-2010-0134 be exploited remotely?
Yes, CVE-2010-0134 allows remote attackers to execute arbitrary code on vulnerable systems through specially crafted RTF files.