9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.211 Low
EPSS
Percentile
96.4%
libwpd is a library used to convert Wordperfect documents into other formats.
libwpd contains heap-based overflows in two functions that convert WordPerfect document tables. In addition, it contains an integer overflow in a text-conversion function.
An attacker could entice a user to convert a specially crafted WordPerfect file, resulting in a crash or possibly the execution of arbitrary code with the rights of the user running libwpd.
There is no known workaround at this time.
All libwpd users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/libwpd-0.8.9"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | app-text/libwpd | < 0.8.9 | UNKNOWN |