| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 10.0 | $0-$5k | 0.03 |
A vulnerability, which was classified as very critical, was found in Autonomy Keyview Filter Sdk 10.9. This affects an unknown code block in the library rtfsr.dll. CWE is classifying the issue as CWE-189. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.
The weakness was released 08/17/2010 by Carsten Eiram with Secunia Research (Website). The advisory is shared at symantec.com. This vulnerability is uniquely identified as CVE-2010-0134 since 01/04/2010. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/23/2021).
The vulnerability scanner Nessus provides a plugin with the ID 47899 (Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities (Lotus Notes)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Windows. The commercial vulnerability scanner Qualys is able to test this issue with plugin 118572 (Symantec Products Autonomy KeyView Filter Multiple Vulnerabilities).
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
The vulnerability is also documented in the databases at Vulnerability Center (SBV-26650) and Tenable (47899). Entries connected to this vulnerability are available at 54384, 54383, 54382 and 54380.
Vendor
Name
VulDB Meta Base Score: 10.0
VulDB Meta Temp Score: 10.0
VulDB Base Score: 10.0
VulDB Temp Score: 10.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Class: Unknown
CWE: CWE-189
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 47899
Nessus Name: Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities (Lotus Notes)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Threat Intelligence
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍Recommended: no mitigation known
Status: 🔍
0-Day Time: 🔍
01/04/2010 🔍
07/27/2010 🔍
07/27/2010 🔍
08/02/2010 🔍
08/17/2010 🔍
08/17/2010 🔍
03/19/2015 🔍
09/23/2021 🔍Advisory: symantec.com
Researcher: Carsten Eiram
Organization: Secunia Research
Status: Not defined
Confirmation: 🔍
CVE: CVE-2010-0134 (🔍)
Vulnerability Center: 26650 – Autonomy KeyView 10.4 and 10.9 RTF Parsing Signedness Error Allows Remote Code Execution, Medium
SecurityFocus: 41928 – Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities
See also: 🔍
Created: 03/19/2015 14:37
Updated: 09/23/2021 08:21
Changes: (1) source_nessus_risk
Complete: 🔍
Enable the mail alert feature now!
