Unscored severity · published Mar 16, 2007
CVE-2007-0002
Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application…
–
CVSS
6.8%
EPSS
No
On KEV
Description
Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LL
Libwpd Library · Libwpd
through 0.8.8; 0.8.2; 0.8.6; 0.8.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0002
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0002
fedoranews.org
http://fedoranews.org/cms/node/2805
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=490
lists.suse.com
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
Vendor Advisory
http://secunia.com/advisories/24465
Vendor Advisory
http://secunia.com/advisories/24507
Vendor Advisory
http://secunia.com/advisories/24557