CVE-2012-2149

CVE-2012-2149 affects the libwpd library (used by OpenOffice.org prior to 3.4). The vulnerability stems from a memory corruption risk in WPXContentListener::_closeTableRow (reported as a negative array index or integer overflow), allowing remote code execution via crafted WordPerfect .WPD documen...

CVE-2012-2149

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

CVE-2012-2149

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

OpenOffice 3.4之前版本自定义libwpd任意代码执行漏洞

BUGTRAQ ID: 53570 CVE ID: CVE-2012-2149 OpenOffice原是Sun公司的一套商业级Office软件－StarOffice，经过Sun公司公开程序码之后，正式命名为OpenOffice发展计划。 OpenOffice 3.3和3.4 Beta使用具有内存覆盖漏洞的自定义libwpd时，可通过特制的Wordperfect WPD格式文档加以利用，导致任意代码执行 0 OpenOffice 3.4 厂商补丁： OpenOffice ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Heap overflow

Heap-based buffer overflow in the WordPerfect 5.x reader wosr.dll, as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."...

CVE-2010-0135

CVE-2010-0135 affects Autonomy KeyView’s WordPerfect 5.x reader (wosr.dll). The vulnerability is a heap-based buffer overflow in the data block parsing path, caused by a boundary error when processing data blocks. Impact: remote code execution via crafted files, with affected KeyView versions inc...

IBM Lotus Notes WPD Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. There exist a buffer overflow vulnerability in IBM Lotus Notes WPD viewer. The...

Corel WordPerfect Office X5 15.0.0.357 (wpd) Buffer Overflow PoC

Exploit for windows platform in category dos / poc ================================================================ Corel WordPerfect Office X5 15.0.0.357 wpd Buffer Overflow PoC ================================================================ / - Title: Corel WordPerfect Office X5 15.0.0.357 wpd...

Corel WordPerfect Office X5 15.0.0.357 (wpd) Remote Buffer Preoccupation PoC

Summary Corel® WordPerfect® Office X5 – Standard Edition is the essential office suite for word processing, spreadsheets, presentations and email. Chosen over Microsoft® Office by millions of longtime users, it integrates the latest productivity software with the best of the Web. Work faster and...

Corel WordPerfect Office X5 15.0.0.357 - 'wpd' Buffer Overflow (PoC)

/ - Title: Corel WordPerfect Office X5 15.0.0.357 wpd Remote Buffer Preoccupation PoC - Vendor: Corel Corporation - Product Web Page: http://www.corel.com - Version Tested: 15.0.0.357 Standard Edition - Summary: Corel® WordPerfect® Office X5 – Standard Edition is the essential office suite for wo...

Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow (PoC)

Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow PoC / - Title: Corel WordPerfect Office X5 15.0.0.357 wpd Remote Buffer Preoccupation PoC - Vendor: Corel Corporation - Product Web Page: http://www.corel.com - Version Tested: 15.0.0.357 Standard Edition - Summary: Corel® WordPerfect®...

IBM Lotus Notes WPD Attachment Handling Buffer Overflow (CVE-2008-4564)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. A stack-based buffer overflow vulnerability exists in the IBM Lotus Notes WPD. Th...

Microsoft WordPerfect 5.x Converter Buffer Overflow (CVE-2004-0573)

The Microsoft Office text editing tools support a number of foreign file formats for compatibility with third party software. The foreign file format support is based on import and export converters. When a text editor needs to read a foreign format file, a converter transforms the file to an...

WordPerfect Multiple Vendor libwpd WP3TablesGroup Heap Overflow (CVE-2007-0002)

WordPerfect documents have common file extensions ".WP" and ".WPD", which is used by Corel's proprietary word processing application, WordPerfect. Its popularity was based on the fact that it had been available for a wide variety of computers and operation systems, including Mac OS, Linux, and...

Microsoft Word 2000 WordPerfect Converter Stack Corruption (MS09-010; CVE-2009-0088)

The Microsoft Office WordPerfect Converter assists users to convert documents from Corel WordPerfect file formats to Microsoft Word file formats.The Microsoft Office Converter Pack allows Office to use additional document formats that were not natively supported. The vulnerability is due a stack...

Microsoft Word 2000 WordPerfect转换器栈溢出漏洞（MS09-010）

BUGTRAQ ID: 34469 CVECAN ID: CVE-2009-0088 Word是微软Office套件中的文件处理工具。 Word可以通过应用过滤器模块将其他应用程序所创建的文档转换为Word可使用的格式。Word 2000所使用的WordPerfect 6.x转换器的转换代码没有对数据结构所分配的长度正确的验证计数器，如果解析了特制的WordPerfect文档就可能触发栈溢出，导致执行任意代码。 Microsoft Word 2000 SP3 临时解决方法： 不要打开或保存从不可信任来源接收到的或从可信任来源意外接收到的Microsoft Office文件。...

CVE-2009-0088

The WordPerfect 6.x Converter WPFT632.CNV, 1998.1.27.0 in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an...

CVE-2009-0088

The WordPerfect 6.x Converter WPFT632.CNV, 1998.1.27.0 in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an...

CVE-2009-0088

CVE-2009-0088 describes a remote code execution vulnerability in the WordPerfect 6.x Converter (WPFT632.CNV) used by Word 2000 SP3 and the Office Converter Pack. The issue arises when the converter fails to properly validate the length of an input string, enabling a crafted WordPerfect 6.x docume...

iDefense Security Advisory 04.14.09: Microsoft Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 04.14.09 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 14, 2009 I. BACKGROUND Word 2000 is a word processing application included with the Microsoft Office 2000 software. The WordPerfect Converter is a tool used...