CVE-2007-0002

Published: Mar 16, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Affected (4)

Products: Libwpd: Libwpd Library

Libwpd

1 product

Libwpd Library

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Libwpd Libwpd Library	Up to 0.8.8
Libwpd Libwpd Library	Version 0.8.2
Libwpd Libwpd Library	Version 0.8.6
Libwpd Libwpd Library	Version 0.8.7

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (70)

http://fedoranews.org/cms/node/2805

Source: secalert@redhat.com

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=490

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html

Source: secalert@redhat.com

http://secunia.com/advisories/24465

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24507

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24557

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24572

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24573

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24580

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24581

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24588

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24591

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24593

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24613

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24794

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24856

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24906

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200704-07.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.399659

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?release_id=494122

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102863-1

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1268

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1270

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:063

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:064

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0055.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/463033/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23006

Source: secalert@redhat.com

http://www.securitytracker.com/id?1017789

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-437-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0976

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1032

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1339

Source: secalert@redhat.com

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11535

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2805