CVE-2007-0002

Publication date 16 March 2007

Last updated 24 July 2024

Ubuntu priority

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libwpd	7.04 feisty	Fixed 0.8.9-1
	6.10 edgy	Fixed 0.8.6-1ubuntu0.1
	6.06 LTS dapper	Fixed 0.8.4-2ubuntu0.1
openoffice.org	7.04 feisty	Fixed 2.2.0-1ubuntu4
	6.10 edgy	Fixed 2.0.4-0ubuntu6
	6.06 LTS dapper	Fixed 2.0.2-2ubuntu12.4
openoffice.org-amd64	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Fixed 2.0.2-2ubuntu12.4-1
openoffice.org-l10n	7.04 feisty	Fixed 2.2.0-0ubuntu2
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Ignored end of life

CVE-2007-0002

Status

References

Related Ubuntu Security Notices (USN)

Other references