CVE-2010-0131

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-17 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types.

Affected products

Autonomy Keyview Export Sdk: 10.4, 10.9
Autonomy Keyview Filter Sdk: 10.4, 10.9
Autonomy Keyview Viewer Sdk: 10.4, 10.9
Symantec Mail Security: all versions

References

http://secunia.com/secunia_research/2010-23/
http://secunia.com/secunia_research/2010-25/
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/41928
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
http://secunia.com/secunia_research/2010-23/
http://secunia.com/secunia_research/2010-25/
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/41928
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01

Get alerted when CVE-2010-0131 or the next vulnerability affects your stack