CVE-2007-0002
- State
- Published
- Severity
- Not scored
- Published
- Mar 16, 2007
- Updated
- Aug 7, 2024
- Reserved
- Dec 19, 2006
Description
Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 102863vendor-advisory
- ADV-2007-1339vdb-entry
- 23006vdb-entry
- FEDORA-2007-350vendor-advisory
- 24573third-party-advisory
- GLSA-200704-12vendor-advisory
- 24588third-party-advisory
- 24581third-party-advisory
- oval:org.mitre.oval:def:11535vdb-entrysignature
- GLSA-200704-07vendor-advisory
- SUSE-SA:2007:023vendor-advisory
- ADV-2007-1032vdb-entry
- 24613third-party-advisory
- 24794third-party-advisory
- MDKSA-2007:064vendor-advisory
- 24465third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=494122
- DSA-1268vendor-advisory
- 24507third-party-advisory
- 24557third-party-advisory
- 20070316 rPSA-2007-0057-1 libwpdmailing-list
- MDKSA-2007:063vendor-advisory
- 24591third-party-advisory
- 24580third-party-advisory
- DSA-1270vendor-advisory
- USN-437-1vendor-advisory
- 24572third-party-advisory
- 20070316 Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilitiesthird-party-advisory
- 24593third-party-advisory
- ADV-2007-0976vdb-entry
- SSA-2007-085-02vendor-advisory
- 1017789vdb-entry
- RHSA-2007:0055vendor-advisory
- 24906third-party-advisory
- 24856third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.