Lucene search

K
freebsdFreeBSDB9044CC2-8AA5-11DB-BD0D-00123FFE8333
HistoryJun 12, 2006 - 12:00 a.m.

wv2 -- Integer Overflow Vulnerability

2006-06-1200:00:00
vuxml.freebsd.org
11

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.2%

Secunia reports:

A vulnerability has been reported in wvWare wv2 Library, which
potentially can be exploited by malicious people to compromise an
application using the library.
The vulnerability is caused due to an integer overflow error in
“word_helper.h” when handling a Word document. This can be
exploited to cause a buffer overflow and may allow arbitrary code
execution via a specially crafted Word document.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchwv2< 0.2.3UNKNOWN

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.2%

Related for B9044CC2-8AA5-11DB-BD0D-00123FFE8333