Lucene search

K
ubuntuUbuntuUSN-374-1
HistoryNov 01, 2006 - 12:00 a.m.

wvWare vulnerability

2006-11-0100:00:00
ubuntu.com
24

7.5 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.288 Low

EPSS

Percentile

96.8%

Releases

  • Ubuntu 6.10

Details

An integer overflow was discovered in the DOC file parser of the wv
library. By tricking a user into opening a specially crafted MSWord
(.DOC) file, remote attackers could execute arbitrary code with the
user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibwv-1.2-1< 1.2.1-2ubuntu0.1UNKNOWN

7.5 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.288 Low

EPSS

Percentile

96.8%