Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word (DOC) file that produces (1) large LFO clfolvl values in the wvGetLFO_records function or (2) a large LFO nolfo value in the wvGetFLO_PLF function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade abiwordUpgrade wv | Jul 30, 2024 | Oct 28, 2006 |
| Freebsd | — | Upgrade wv | Dec 10, 2025 | Dec 13, 2006 |
| Gentoo Linux | — | Upgrade app-text/wv. | Oct 30, 2017 | Oct 27, 2006 |
| Ubuntu | — | Upgrade libwv-1.2-1 | Nov 8, 2024 | Oct 28, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub