Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)

Microsoft Security Bulletin MS09-010 - Critical Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution 960477 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves two publicly disclosed vulnerabilities and two...

Debian Security Advisory DSA 1268-1 (libwpd)

The remote host is missing an update to libwpd announced via advisory DSA 1268-1. iDefense reported several integer overflow bugs in libwpd, a library for handling WordPerfect documents. Attackers were able to exploit these with carefully crafted Word Perfect files that could cause an application...

Lotus Notes WPD attachment viewer buffer overflow

Added: 01/03/2008 CVE: CVE-2007-5910 BID: 26175 OSVDB: 40783 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted WordPerfect WPD attachment. Resolution...

Lotus Notes WPD attachment viewer buffer overflow

Added: 01/03/2008 CVE: CVE-2007-5910 BID: 26175 OSVDB: 40783 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted WordPerfect WPD attachment. Resolution...

Lotus Notes WPD attachment viewer buffer overflow

Added: 01/03/2008 CVE: CVE-2007-5910 BID: 26175 OSVDB: 40783 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted WordPerfect WPD attachment. Resolution...

Stack overflow

Stack-based buffer overflow in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a...

CVE-2007-5910

Stack-based buffer overflow in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a...

CVE-2007-5910

Stack-based buffer overflow in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a...

CVE-2007-5910

CVE-2007-5910 is a stack-based buffer overflow in Autonomy/Verity KeyView Viewer, Filter, and Export SDK prior to 9.2.0.12, exploited via crafted WordPerfect (WPD) attachments. It impacts Lotus Notes (wp6sr.dll) and other products (ActivePDF DocConverter, etc.), enabling remote code execution. Mi...

Ubuntu 5.10 / 6.06 LTS / 6.10 : libwpd vulnerability (USN-437-1)

Sean Larsson of iDefense Labs discovered that libwpd was vulnerable to integer overflows. If a user were tricked into opening a specially crafted WordPerfect document with an application that used libwpd, an attacker could execute arbitrary code with user privileges. Note that Tenable Network...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-2652)

Following security problems were fixed in OpenOfficeorg : CVE-2007-0002: Various problems were fixed in the Wordperfect converter library libwpd in OpenOfficeorg which could be used by remote attackers to potentially execute code or crash OpenOfficeorg. CVE-2007-0238: A stack overflow in the...

openSUSE 10 Security Update : libwpd (libwpd-2642)

CVE-2007-0002: Various problems were fixed in the Wordperfect converter library libwpd in OpenOfficeorg which could be used by remote attackers to potentially execute code or crash OpenOfficeorg. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description John Heasman of NGSSoftware has discovered a stack-based buffer overflow in the StarCal...

GLSA-200704-07 : libwpd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-07 libwpd: Multiple vulnerabilities libwpd contains heap-based overflows in two functions that convert WordPerfect document tables. In addition, it contains an integer overflow in a text-conversion function. Impact : An...

Sun OpenOffice.org < 2.2 Multiple Vulnerabilities

The remote host is running a version of Sun Microsystems OpenOffice.org that is prior to version 2.2. It is, therefore, affected by a stack-based buffer overflow vulnerability in its handling of StarCalc documents. If a remote attacker can trick a user into opening a specially crafted StarCalc...

Corel WordPerfect Office PRS堆栈缓冲区溢出漏洞

Corel WordPerfect是一款功能强大的办公软件套件。 Corel WordPerfect X3存在堆栈缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Wordperfect X3不正确检查存储在Wordperfect文档中的打印机选择文件名，提交恶意文档，诱使用户访问可导致以应用程序进程权限执行任意指令。 Corel WordPerfect Office X3 13.0 .565 目前没有解决方案提供： http://www.corel.com/ / wp13exp.c - Wordperfect X3 remote exploit Proof of...

Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit

No description provided by source. / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original...

Stack overflow

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...