Vulnerability Details CVE-2010-0135
Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.04
EPSS Ranking 89.1%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/secunia_research/2010-31/
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.securityfocus.com/bid/41928
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
- http://secunia.com/secunia_research/2010-31/
- http://www-01.ibm.com/support/docview.wss?uid=swg21440812
- http://www.securityfocus.com/bid/41928
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
Products affected by CVE-2010-0135
-
cpe:2.3:a:autonomy:keyview_export_sdk:10.4
-
cpe:2.3:a:autonomy:keyview_export_sdk:10.9
-
cpe:2.3:a:autonomy:keyview_filter_sdk:10.4
-
cpe:2.3:a:autonomy:keyview_filter_sdk:10.9
-
cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4
-
cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9