CVE-2010-1524

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-17 · updated 2026-06-16
Weakness: CWE-119

Description

The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory corruption.

Affected products

Autonomy Keyview Export Sdk: 10.4, 10.9
Autonomy Keyview Filter Sdk: 10.4, 10.9
Autonomy Keyview Viewer Sdk: 10.4, 10.9

References

http://secunia.com/secunia_research/2010-35/
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/41928
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
http://secunia.com/secunia_research/2010-35/
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/41928
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01

Get alerted when CVE-2010-1524 or the next vulnerability affects your stack