CVE-2007-1466 - Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importe

CVE-2007-1466

Summary

Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file, a different vulnerability than CVE-2007-0002. This vulnerability has been addressed by the vendor through a product update: http://sourceforge.net/project/showfiles.php?group_id=62662

References

Vulnerable Configurations

cpe:2.3:a:sourceforge:wordperfect_document_importer-exporter:*:*:*:*:*:*:*:*
cpe:2.3:a:sourceforge:wordperfect_document_importer-exporter:*:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 16-10-2018 - 16:38)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

oval via4

accepted

2013-04-29T04:09:27.650-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 3
oval oval:org.mitre.oval:def:11782
comment CentOS Linux 3.x
oval oval:org.mitre.oval:def:16651
comment The operating system installed on the system is Red Hat Enterprise Linux 4
oval oval:org.mitre.oval:def:11831
comment CentOS Linux 4.x
oval oval:org.mitre.oval:def:16636
comment Oracle Linux 4.x
oval oval:org.mitre.oval:def:15990
comment The operating system installed on the system is Red Hat Enterprise Linux 5
oval oval:org.mitre.oval:def:11414
comment The operating system installed on the system is CentOS Linux 5.x
oval oval:org.mitre.oval:def:15802
comment Oracle Linux 5.x
oval oval:org.mitre.oval:def:15459

description

family

unix

oval:org.mitre.oval:def:10862

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

version

redhat via4

advisories

bugzilla

id	1618301
title	CVE-2007-1466 security flaw

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 4 is installed
oval oval:com.redhat.rhba:tst:20070304025

AND
comment openoffice.org is earlier than 0:1.1.5-10.6.0.EL4
oval oval:com.redhat.rhsa:tst:20070033001
comment openoffice.org is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060573002

AND

comment openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4
oval oval:com.redhat.rhsa:tst:20070033003
comment openoffice.org-i18n is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060573004

AND

comment openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4
oval oval:com.redhat.rhsa:tst:20070033005
comment openoffice.org-kde is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060573006

AND

comment openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4
oval oval:com.redhat.rhsa:tst:20070033007
comment openoffice.org-libs is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060573008

rhsa

id	RHSA-2007:0033
released	2007-03-22
severity	Important
title	RHSA-2007:0033: openoffice.org security update (Important)

bugzilla

id	1618301
title	CVE-2007-1466 security flaw

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND
comment libwpd is earlier than 0:0.8.7-3.el5
oval oval:com.redhat.rhsa:tst:20070055001
comment libwpd is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070055002
AND
comment libwpd-devel is earlier than 0:0.8.7-3.el5
oval oval:com.redhat.rhsa:tst:20070055003
comment libwpd-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070055004
AND
comment libwpd-tools is earlier than 0:0.8.7-3.el5
oval oval:com.redhat.rhsa:tst:20070055005
comment libwpd-tools is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070055006

rhsa

id	RHSA-2007:0055
released	2007-03-16
severity	Important
title	RHSA-2007:0055: libwpd security update (Important)

rpms

openoffice.org-0:1.1.2-38.2.0.EL3
openoffice.org-0:1.1.5-10.6.0.EL4
openoffice.org-debuginfo-0:1.1.2-38.2.0.EL3
openoffice.org-debuginfo-0:1.1.5-10.6.0.EL4
openoffice.org-i18n-0:1.1.2-38.2.0.EL3
openoffice.org-i18n-0:1.1.5-10.6.0.EL4
openoffice.org-kde-0:1.1.5-10.6.0.EL4
openoffice.org-libs-0:1.1.2-38.2.0.EL3
openoffice.org-libs-0:1.1.5-10.6.0.EL4
libwpd-0:0.8.7-3.el5
libwpd-debuginfo-0:0.8.7-3.el5
libwpd-devel-0:0.8.7-3.el5
libwpd-tools-0:0.8.7-3.el5

refmap via4

bid	23006
bugtraq	20070316 rPSA-2007-0057-1 libwpd
confirm	http://sourceforge.net/project/shownotes.php?release_id=494122
debian	DSA-1268
fedora	FEDORA-2007-350
gentoo	GLSA-200704-07
idefense	20070316 Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities
mandriva	MDKSA-2007:063 MDKSA-2007:064
sectrack	1017789
secunia	24507 24550 24557 24572 24573 24580 24581 24588 24794 24856
sunalert	102863
ubuntu	USN-437-1
vupen	ADV-2007-0976

Last major update

16-10-2018 - 16:38

Published

16-03-2007 - 21:19

Last modified

16-10-2018 - 16:38