NVD

Id
52239  
Name
CVE-2007-0002  
Description
Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-16  
Modified Date
2011-09-09  
Seq
2007-0002  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263576 52239 CVE-2007-0002 FEDORA-2007-350  View
263577 52239 CVE-2007-0002 20070316 Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities  View
263578 52239 CVE-2007-0002 SUSE-SA:2007:023  View
263579 52239 CVE-2007-0002 oval:org.mitre.oval:def:11535  View
263580 52239 CVE-2007-0002 GLSA-200704-07  View
263581 52239 CVE-2007-0002 SSA-2007-085-02  View
263582 52239 CVE-2007-0002 http://sourceforge.net/project/shownotes.php?release_id=494122  View
263583 52239 CVE-2007-0002 102863  View
263584 52239 CVE-2007-0002 DSA-1268  View
263585 52239 CVE-2007-0002 DSA-1270  View
263586 52239 CVE-2007-0002 GLSA-200704-12  View
263587 52239 CVE-2007-0002 MDKSA-2007:063  View
263588 52239 CVE-2007-0002 MDKSA-2007:064  View
263589 52239 CVE-2007-0002 RHSA-2007:0055  View
263590 52239 CVE-2007-0002 20070316 rPSA-2007-0057-1 libwpd  View
263591 52239 CVE-2007-0002 23006  View
263592 52239 CVE-2007-0002 1017789  View
263593 52239 CVE-2007-0002 USN-437-1  View
263594 52239 CVE-2007-0002 ADV-2007-0976  View
263595 52239 CVE-2007-0002 ADV-2007-1032  View
263596 52239 CVE-2007-0002 ADV-2007-1339  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51571 JVNDB-2007-000233 libwpd の複数の関数におけるヒープオーバーフローの脆弱性 WordPerfect 文書の処理に利用されるライブラリ libwpd には、WP3TablesGroup::_readContents() 関数および WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup() 関数において整数オーバーフローが引き起こされる脆弱性が存在します。 CVE-2007-0002 23357 CVE-2007-0002 52239 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000233.html 2007-03-16 2007-05-01 View