← Vulnerability feed

Vulnerability record · CVE-2010-0134 · published 17 August 2010

CVE-2010-0134: Autonomy keyview export sdk vulnerability

Autonomy · Keyview Export Sdk

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.

9.3 CVSS 2.0 High EPSS 4.0% · top 9.9% CWE-189 · CWE-189
9.3CVSS 2.0 base score
4.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/secunia_research/2010-27/ Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/41928
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2
http://secunia.com/secunia_research/2010-27/ Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21440812
http://www.securityfocus.com/bid/41928
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2

Track CVE-2010-0134 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2010-1524Autonomy keyview export sdk memory buffer overflow vulnerabilityThe SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote …EPSS 3.3%9.3CVE-2010-1525Autonomy keyview export sdk vulnerabilityInteger underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other pro…EPSS 4.0%9.3CVE-2010-0126Autonomy keyview export sdk memory buffer overflow vulnerabilityHeap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows…EPSS 4.0%9.3CVE-2010-0131Autonomy keyview export sdk memory buffer overflow vulnerabilityStack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and p…EPSS 4.1%9.3CVE-2010-0133Autonomy keyview export sdk memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Sym…EPSS 4.0%9.3CVE-2010-0135Autonomy keyview export sdk memory buffer overflow vulnerabilityHeap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows re…EPSS 4.0%9.3CVE-2008-4564Autonomy keyview export sdk memory buffer overflow vulnerabilityStack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) produ…EPSS 6.8%9.3CVE-2007-6008Autonomy keyview export sdk memory buffer overflow vulnerabilityHeap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK allows remote attackers t…EPSS 3.0%

Source: NIST National Vulnerability Database (record CVE-2010-0134), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.