CVE Feed

    Dashboard / CVE / CVE-2007-0002

    CVE-2007-0002

    Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

    Published:Mar 16, 2007
    Last Modified:Apr 23, 2026
    EPS:Mar 16, 2007
    EPSS Score:0.09078
    CVSS Score:9.3

    Affected Products

    Vendor
    Libwpd
    Product
    Libwpd Library
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    References

    http://fedoranews.org/cms/node/2805
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=490
    http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
    http://secunia.com/advisories/24465
    http://secunia.com/advisories/24507
    http://secunia.com/advisories/24557
    http://secunia.com/advisories/24572
    http://secunia.com/advisories/24573
    http://secunia.com/advisories/24580
    http://secunia.com/advisories/24581
    http://secunia.com/advisories/24588
    http://secunia.com/advisories/24591
    http://secunia.com/advisories/24593
    http://secunia.com/advisories/24613
    http://secunia.com/advisories/24794
    http://secunia.com/advisories/24856
    http://secunia.com/advisories/24906
    http://security.gentoo.org/glsa/glsa-200704-07.xml
    http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.399659
    http://sourceforge.net/project/shownotes.php?release_id=494122
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-102863-1
    http://www.debian.org/security/2007/dsa-1268
    http://www.debian.org/security/2007/dsa-1270
    http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:063
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:064
    http://www.redhat.com/support/errata/RHSA-2007-0055.html
    http://www.securityfocus.com/archive/1/463033/100/0/threaded
    http://www.securityfocus.com/bid/23006
    http://www.securitytracker.com/id?1017789
    http://www.ubuntu.com/usn/usn-437-1
    http://www.vupen.com/english/advisories/2007/0976
    http://www.vupen.com/english/advisories/2007/1032
    http://www.vupen.com/english/advisories/2007/1339
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11535
    http://fedoranews.org/cms/node/2805
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=490
    http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
    http://secunia.com/advisories/24465
    http://secunia.com/advisories/24507
    http://secunia.com/advisories/24557
    http://secunia.com/advisories/24572
    http://secunia.com/advisories/24573
    http://secunia.com/advisories/24580
    http://secunia.com/advisories/24581
    http://secunia.com/advisories/24588
    http://secunia.com/advisories/24591
    http://secunia.com/advisories/24593
    http://secunia.com/advisories/24613
    http://secunia.com/advisories/24794
    http://secunia.com/advisories/24856
    http://secunia.com/advisories/24906
    http://security.gentoo.org/glsa/glsa-200704-07.xml
    http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.399659
    http://sourceforge.net/project/shownotes.php?release_id=494122
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-102863-1
    http://www.debian.org/security/2007/dsa-1268
    http://www.debian.org/security/2007/dsa-1270
    http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:063
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:064
    http://www.redhat.com/support/errata/RHSA-2007-0055.html
    http://www.securityfocus.com/archive/1/463033/100/0/threaded
    http://www.securityfocus.com/bid/23006
    http://www.securitytracker.com/id?1017789
    http://www.ubuntu.com/usn/usn-437-1
    http://www.vupen.com/english/advisories/2007/0976
    http://www.vupen.com/english/advisories/2007/1032
    http://www.vupen.com/english/advisories/2007/1339
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11535

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High