NVD Vulnerability Detail
Search Exploit, PoC
CVE-2007-1466
Summary

Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file, a different vulnerability than CVE-2007-0002.

Summary

This vulnerability has been addressed by the vendor through a product update: http://sourceforge.net/project/showfiles.php?group_id=62662

Publication Date March 17, 2007, 6:19 a.m.
Registration Date Jan. 29, 2021, 2:08 p.m.
Last Update Oct. 17, 2018, 1:38 a.m.
CVSS2.0 : MEDIUM
Score 6.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:P
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 中
攻撃前の認証要否(Au) 不要
機密性への影響(C) 低
完全性への影響(I) 低
可用性への影響(A) 低
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges はい
User operation required はい
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:sourceforge:wordperfect_document_importer-exporter:*:*:*:*:*:*:*:* 0.8.8
Related information, measures and tools
Common Vulnerabilities List