CVE-2006-2197: Integer Overflow
Published Jun 15, 2006
·Updated
Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.
Affected Software
2 affected components
wvWare Wv2<=0.2.3
wvWare Wv2=0.2.2
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jun 15, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2197?
CVE-2006-2197 has a high severity as it allows attackers to execute arbitrary code due to an integer overflow in wv2.
2
How do I fix CVE-2006-2197?
To fix CVE-2006-2197, upgrade wv2 to version 0.2.3 or later.
3
What types of attacks can CVE-2006-2197 enable?
CVE-2006-2197 can enable context-dependent attackers to execute arbitrary code via specially crafted Microsoft Word documents.
4
Which versions of wv2 are affected by CVE-2006-2197?
CVE-2006-2197 affects all versions of wv2 prior to 0.2.3, specifically 0.2.2 and earlier.
5
Can CVE-2006-2197 affect all Microsoft Word documents?
CVE-2006-2197 affects only specially crafted Microsoft Word documents that exploit the integer overflow vulnerability.