Every CVESearch/Get API key

CVE-2007-0002

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0...

9.3 HighFix available

CVE-2007-0002 is a high vulnerability (CVSS 9.3) in Libwpd Library, published March 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.77%, the 94th percentile. Fixed in libwpd 0.8.9-1.

What does this mean?
Severity
9.3 HighCVSS 2.0, NVD
Exploit chance
6.77%EPSS, 94th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.8.9-1libwpd +15 more

Description

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Exploit likelihood

6.77%Down 1.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libwpd
Debian:12
before 0.8.9-1
0.8.9-1
libwpd
Debian:13
before 0.8.9-1
0.8.9-1
libwpd
Debian:14
before 0.8.9-1
0.8.9-1
libwpd
Debian:3.1
before 0.8.1-1sarge1, plus listed versions
0.8.1-1
0.8.1-1sarge1
libwpd
Debian:4.0
before 0.8.7-6
0.8.7-6
openoffice.org
Debian:3.1
From an advisory covering 3 CVEs
before 1.1.3-9sarge6, plus listed versions
1.1.3-91.1.3-9sarge11.1.3-9sarge21.1.3-9sarge31.1.3-9sarge41.1.3-9sarge5
1.1.3-9sarge6
libwpd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
Show 6 moreShow less
Affected packages
PackageAffectedFixed
libwpd-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd-tools
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd
Red Hat:rhel_productivity:5
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd-debuginfo
Red Hat:rhel_productivity:5
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd-devel
Red Hat:rhel_productivity:5
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5
libwpd-tools
Red Hat:rhel_productivity:5
From an advisory covering 2 CVEs
before 0:0.8.7-3.el5
0:0.8.7-3.el5

What each source reports

NVD Score used9.3

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Record
CVE-2007-0002
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Record
CVE-2007-0002
Updated
2026-11-02
EUVDEUVD-2007-0006No score

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Record
EUVD-2007-0006
Updated
2026-11-03
GitHub AdvisoriesGHSA-9573-76hf-6vg6No score

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0...

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Record
GHSA-9573-76hf-6vg6
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Record
CVE-2007-0002
Updated
2026-11-02
OSVDEBIAN-CVE-2007-0002No score

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions. NOTE: the integer overflow has been split into CVE-2007-1466.

Record
DEBIAN-CVE-2007-0002
Updated
2026-11-02
OSVopenSUSE-SU-2024:11013-1No score

libwpd-0_10-10-0.10.3-2.3 on GA media

These are all security issues fixed in the libwpd-0_10-10-0.10.3-2.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11013-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
aliases
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 45 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open