9.3

CVE-2007-0002

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions.  NOTE: the integer overflow has been split into CVE-2007-1466.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libwpd ≫ Libwpd Library Version <= 0.8.8
Libwpd ≫ Libwpd Library Version0.8.2
Libwpd ≫ Libwpd Library Version0.8.6
Libwpd ≫ Libwpd Library Version0.8.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.72% 0.931
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://fedoranews.org/cms/node/2805
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=490
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
http://secunia.com/advisories/24465
Vendor Advisory
http://secunia.com/advisories/24507
Vendor Advisory
http://secunia.com/advisories/24557
Vendor Advisory
http://secunia.com/advisories/24572
Vendor Advisory
http://secunia.com/advisories/24573
Vendor Advisory
http://secunia.com/advisories/24580
Vendor Advisory
http://secunia.com/advisories/24581
Vendor Advisory
http://secunia.com/advisories/24588
Vendor Advisory
http://secunia.com/advisories/24591
Vendor Advisory
http://secunia.com/advisories/24593
Vendor Advisory
http://secunia.com/advisories/24613
Vendor Advisory
http://secunia.com/advisories/24794
Vendor Advisory
http://secunia.com/advisories/24856
Vendor Advisory
http://secunia.com/advisories/24906
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200704-07.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.399659
http://sourceforge.net/project/shownotes.php?release_id=494122
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102863-1
http://www.debian.org/security/2007/dsa-1268
http://www.debian.org/security/2007/dsa-1270
http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:063
http://www.mandriva.com/security/advisories?name=MDKSA-2007:064
http://www.redhat.com/support/errata/RHSA-2007-0055.html
Vendor Advisory
http://www.securityfocus.com/archive/1/463033/100/0/threaded
http://www.securityfocus.com/bid/23006
http://www.securitytracker.com/id?1017789
http://www.ubuntu.com/usn/usn-437-1
http://www.vupen.com/english/advisories/2007/0976
Vendor Advisory
http://www.vupen.com/english/advisories/2007/1032
Vendor Advisory
http://www.vupen.com/english/advisories/2007/1339
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11535