Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

wv: integer overflow

Package(s):

CVE #(s):

CVE-2006-4513

Created:

November 2, 2006

Updated:

December 7, 2006

Description:

The wv library has an integer overflow vulnerability in the DOC file parser. If a user can be tricked into opening a maliciously crafted MSWord file, a remote attacker can execute arbitrary code with the privileges of the user.

Alerts:

Gentoo	200612-01	2006-12-07
Mandriva	MDKSA-2006:202	2006-11-07
Ubuntu	USN-374-1	2006-11-01

(Log in to post comments)