Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libwpd | Jul 30, 2024 | Mar 16, 2007 |
| Gentoo Linux | — | Upgrade app-text/libwpd.Upgrade app-office/openoffice.Upgrade app-office/openoffice-bin. | Oct 30, 2017 | Mar 16, 2007 |
| Suse | — | Upgrade libwpd-0_8-8Upgrade libwpd-devel-docUpgrade libwpd-devel | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade libwpd8c2aUpgrade libwpd8c2 | Nov 8, 2024 | Mar 16, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub