CVE-2007-0002: Buffer Overflow
Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::readContents and (2) WP5DefinitionGroupDefineTablesSubGroup::WP5DefinitionGroupDefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0002?
CVE-2007-0002 is considered critical as it allows for denial of service and potential arbitrary code execution.
How do I fix CVE-2007-0002?
To fix CVE-2007-0002, upgrade to libwpd version 0.8.9 or later.
What software is affected by CVE-2007-0002?
CVE-2007-0002 affects libwpd versions before 0.8.9, including versions 0.8.2, 0.8.6, and 0.8.7.
What type of attack is related to CVE-2007-0002?
CVE-2007-0002 is associated with a user-assisted remote attack utilizing crafted WordPerfect files.
What are the consequences of exploiting CVE-2007-0002?
Exploiting CVE-2007-0002 can lead to application crashes or the execution of arbitrary code.