Heap-Based Buffer Overflow in libwpd: CVE-2007-0002 Vulnerability Overview
Summary
CVE-2007-0002: Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary co... Affects libwpd versions < 0.8.9-1. Fixed in 0.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
libwpd is a library designed for importing and exporting WordPerfect documents. It provides essential functionalities for handling WordPerfect file formats, enabling applications to read and write these documents seamlessly. However, prior to version 0.8.9, libwpd was found to be vulnerable to multiple heap-based buffer overflows, which could lead to severe security issues.
Vulnerability Detail
The vulnerability, identified as CVE-2007-0002, arises from improper handling of loop counter values in specific functions within libwpd. This flaw allows user-assisted remote attackers to exploit crafted WordPerfect files, potentially leading to application crashes (denial of service) and the execution of arbitrary code. The affected functions are WP3TablesGroup::_readContents and WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup. The integer overflow associated with this vulnerability has been documented separately as CVE-2007-1466.
How To Fix
Minimum fixed version
0.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libwpdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading is not immediately possible, users can mitigate the risk by avoiding the opening of untrusted WordPerfect files until the library is updated. Additionally, implementing strict file validation and monitoring can help reduce exposure to potential attacks.
Conclusion
CVE-2007-0002 represents a significant security risk for users of the libwpd library prior to version 0.8.9. It is crucial for users to upgrade their installations to the latest version to protect against potential exploits. Additionally, utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities in real-time.
See every vulnerability recorded for libwpd →
FAQ
CVE-2007-0002 is a vulnerability in the libwpd library that allows for heap-based buffer overflows, potentially leading to application crashes and arbitrary code execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to denial of service through application crashes and may allow attackers to execute arbitrary code on the affected system.
Yes, upgrading to libwpd version 0.8.9-1 or later will patch this vulnerability.
If an immediate upgrade is not possible, avoid opening untrusted WordPerfect files and consider implementing additional security measures to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for libwpd.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
