CVE:CVE-2010-0134
CNNVD:CNNVD-201008-169
KeyView是用于导出、转换和查看各种格式文件的软件包。
在多个IBM，Symantec和其他产品中使用的Autonomy KeyView 10.4和10.9版本中的rtfsr.dll中存在整数带符号错误漏洞。远程攻击者可以借助RTF文件中list override表格项特制的\ls关键字参数执行任意代码。
solution:Upgrade autonomy keyview_export_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade autonomy keyview_filter_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9; Upgrade autonomy keyview_viewer_sdk to a higher version than 10.4,10.9,and avoid the version 10.4,10.9