PT-2010-1949 · Ibm+1 · Spreadsheet Lotus 123+1

Published 2010-08-17 · Updated 2013-02-07 · CVE-2010-0133

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Autonomy KeyView versions 10.4 through 10.9

Description The issue is related to multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader, which can allow remote attackers to execute arbitrary code. The overflows are related to "certain records" in the wkssr.dll file.

Recommendations For Autonomy KeyView versions 10.4 through 10.9, consider disabling the SpreadSheet Lotus 123 reader functionality until a patch is available. Restrict access to the wkssr.dll file to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-0133

Affected Products

Autonomy Keyview

Spreadsheet Lotus 123

References · 5

• http://secunia.com/secunia_research/2010-28 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0133 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 · Note
• http://securityfocus.com/bid/41928 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21440812 · Note