CVE-2006-4513

CVE-2006-4513 affects the WV library used by wvWare (formerly mswordview). The issue is two integer overflow flaws in the Word converter: LVL count and LFO count (wvGetLFO_records and wvGetFLO_PLF), exploitable via crafted DOC files to execute code. Affected products include AbiWord and KWord (an...

CVE-2006-3376

CVE-2006-3376 is an integer overflow in libwmf 0.2.8.4 (and older) related to the MaxRecordSize header in WMF files that enables remote code execution or crash when processing crafted WMF data. Affected software range includes libwmf and its use in wv, abiword, freetype, gimp, libgsf, and imagema...

FreeBSD : wv (1892)

The following package needs to be updated: wv %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScript,...

DSA-579-1 abiword - buffer overflow

Bulletin has no description...

Debian DSA-550-1 : wv - buffer overflow

iDEFENSE discovered a buffer overflow in the wv library, used to convert and preview Microsoft Word documents. An attacker could create a specially crafted document that could lead wvHtml to execute arbitrary code on the victims machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 550-1 [email protected] http://www.debian.org/security/ Martin Schulze September 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 550-1 [email protected] http://www.debian.org/security/ Martin Schulze September 20th, 2004 http://www.debian.org/security/faq -...

DSA-550-1 wv - buffer overflow

Bulletin has no description...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...

Mandrake Linux Security Advisory : wv (MDKSA-2004:077)

iDefense discovered a buffer overflow vulnerability in the wv package which could allow an attacker to execute arbitrary code with the privileges of the user running the vulnerable application. The updated packages are patched to protect against this problem. %NASLMINLEVEL 70300 C Tenable Network...

wv: Buffer overflow vulnerability

Background The wv library allows access to MS Word files. It can parse Word files and allow other applications, such as abiword, to import those files into their native formats. Description A use of strcat without proper bounds checking leads to an exploitable buffer overflow. The vulnerable code...

CVE-2004-0645

CVE-2004-0645 affects the wvWare library (wvHandleDateTimePicture) used by wv/Abiword, with a buffer overflow in 0.7.4–0.7.6 and 1.0.0 that enables remote code execution via a long DateTime field. Public advisories (Debian DSA-579-1, CAN-2004-0645, Gentoo GLSA 200407-11, OpenVAS entries) confirm ...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...