CVE-2004-0645

2004-08-0604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0645

buffer overflow

wv library

remote code execution

nvd

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.097 Low

EPSS

Percentile

94.7%

JSON

Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.

CPENameOperatorVersion
wvware:wvwarewvwareeq0.7.5
wvware:wvwarewvwareeq1.0
wvware:wvwarewvwareeq0.7.4
abisource:community_abiwordabisource community abiwordeq2.0.4
abisource:community_abiwordabisource community abiwordeq2.0.7
abisource:community_abiwordabisource community abiwordeq2.0.3
wvware:wvwarewvwareeq0.7.6
abisource:community_abiwordabisource community abiwordeq2.0.6
abisource:community_abiwordabisource community abiwordeq2.0.5

CPE	Name	Operator	Version
wvware:wvware	wvware	eq	0.7.5
wvware:wvware	wvware	eq	1.0
wvware:wvware	wvware	eq	0.7.4
abisource:community_abiword	abisource community abiword	eq	2.0.4
abisource:community_abiword	abisource community abiword	eq	2.0.7
abisource:community_abiword	abisource community abiword	eq	2.0.3
wvware:wvware	wvware	eq	0.7.6
abisource:community_abiword	abisource community abiword	eq	2.0.6
abisource:community_abiword	abisource community abiword	eq	2.0.5