CVE:CVE-2010-0131
CNNVD:CNNVD-201008-167
KeyView是用于导出、转换和查看各种格式文件的软件包。
在Autonomy KeyView 10.4和10.9版本，Symantec Mail Security和其他产品中使用的SpreadSheet Lotus 123阅读器(wkssr.dll)存在基于栈的缓冲区溢出漏洞。远程攻击者可以借助与未知记录中的转换浮点值有关的未明向量执行任意代码。
solution:Upgrade autonomy keyview_export_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade autonomy keyview_filter_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade autonomy keyview_viewer_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade symantec mail_security to a higher version than *