Autonomy Keyview Multiple Vulnerabilities

Last Update Date: 10 Oct 2011 12:26 Release Date: 10 Oct 2011 5995 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities have been identified in Autonomy Keyview, which can be exploited by malicious people to compromise a vulnerable system.

An integer overflow error in jtdsr.dll when parsing QLST chunks within Ichitaro documents can be exploited to cause a heap-based buffer overflow.
A boundary error in jtdsr.dll when parsing Ichitaro documents with a chunk containing "Text" data blocks can be exploited to cause a heap-based buffer overflow.
A logic error in jtdsr.dll when reconstructing text data from multiple data blocks in an Ichitaro document can be exploited to cause a heap-based buffer overflow.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Impact

Before installation of the software, please visit the software manufacturer web-site for more details.