Integer Overflow Vulnerability in WV Library Used by AbiWord and KWord
CVE-2006-4513

Currently unrated

Key Information:

Vendor: Wvware
Status: Wvware
Vendor: CVE Published:; 28 October 2006

What is CVE-2006-4513?

The WV library used in wvWare versions prior to 1.2.3 is susceptible to multiple integer overflow vulnerabilities, which can be exploited by remote attackers. This occurs when a maliciously crafted Microsoft Word (DOC) file prompts the library to handle excessively large LFO clfolvl or nolfo values, allowing for the potential execution of arbitrary code. Products like AbiWord and KWord may also be affected, heightening the risk for users opening DOC files from untrusted sources.

References

http://www.vupen.com/english/advisories/2006/4221

vdb-entryx_refsource_VUPEN

http://securitytracker.com/id?1017126

vdb-entryx_refsource_SECTRACK

http://labs.idefense.com/intelligence/vulnerabilities/dis...

third-party-advisoryx_refsource_IDEFENSE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 28, 2006
Vulnerability Reserved
Aug 31, 2006

CVE-2006-4513 Data

JSON

Wvware

What is CVE-2006-4513?

References

Timeline