CVE-2004-0645: Buffer Overflow
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0645?
CVE-2004-0645 is rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2004-0645?
To fix CVE-2004-0645, upgrade wv library to version 1.0.1 or later, or apply any relevant patches provided by your distribution.
Which software is affected by CVE-2004-0645?
CVE-2004-0645 affects wv library versions 0.7.4 through 0.7.6 and version 1.0.0, as well as specific versions of AbiWord.
What exploitation method can attackers use with CVE-2004-0645?
Attackers can exploit CVE-2004-0645 by crafting a document containing a long DateTime field to trigger the buffer overflow.
Is CVE-2004-0645 still a concern in modern applications?
While CVE-2004-0645 was disclosed in 2004, its relevance depends on the continued use of the affected software versions in current applications.