CVE:CVE-2010-0135
CNNVD:CNNVD-201008-170
KeyView是用于导出、转换和查看各种格式文件的软件包。
在Autonomy KeyView 10.4和10.9版本以及其他产品中使用的WordPerfect 5.x阅读器(wosr.dll)中存在基于堆的缓冲区溢出漏洞。远程攻击者可以借助有关“data blocks”的未明向量执行任意代码。
solution:Upgrade autonomy keyview_export_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade autonomy keyview_filter_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade autonomy keyview_viewer_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9