Package name
wv
Date
2006-11-07
Advisory ID
MDKSA-2006:202
Affected versions
2006.0 i586 , 2007.0 x86_64 , 2007.0 i586 , CS3.0 x86_64 , CS3.0 i586 , 2006.0 x86_64

Problem description

Multiple integer overflows in the WV library in wvWare (formerly
mswordview) before 1.2.3, as used by AbiWord?, KWord, and possibly
other products, allow user-assisted remote attackers to execute
arbitrary code via a crafted Microsoft Word (DOC) file that produces
(1) large LFO clfolvl values in the wvGetLFO_records function or (2) a
large LFO nolfo value in the wvGetFLO_PLF function.

Updated packages have been patched to correct these issues.

Updated packages

2006.0 i586

 c176882af438f2855ad1ac719ea9fc04  2006.0/i586/libwv-1.0_3-1.0.3-3.1.20060mdk.i586.rpm
 751dc9e1689833876cb1c2a0feaa507e  2006.0/i586/libwv-1.0_3-devel-1.0.3-3.1.20060mdk.i586.rpm
 3e05943cd2ce03ddd3632ea790ad08fa  2006.0/i586/wv-1.0.3-3.1.20060mdk.i586.rpm 
 3da51e07d25e318ce98d027361ca0d38  2006.0/SRPMS/wv-1.0.3-3.1.20060mdk.src.rpm

2007.0 x86_64

 ffaa9c1620c2219f6729f42098a2f2c7  2007.0/x86_64/lib64wv-1.2_0-1.2.0-6.1mdv2007.0.x86_64.rpm
 218209af9a92f6ff5d061e6cd1004522  2007.0/x86_64/lib64wv-1.2_0-devel-1.2.0-6.1mdv2007.0.x86_64.rpm
 af48a39af76ec32a9c0bda829d3c094e  2007.0/x86_64/wv-1.2.0-6.1mdv2007.0.x86_64.rpm 
 605b61cd28794f0e2a1657286e2e9b9f  2007.0/SRPMS/wv-1.2.0-6.1mdv2007.0.src.rpm

2007.0 i586

 f99e2be25e5532910e963a46ff34a0f7  2007.0/i586/libwv-1.2_0-1.2.0-6.1mdv2007.0.i586.rpm
 f5ce02431ca181a1d8b4c66fa83fdea2  2007.0/i586/libwv-1.2_0-devel-1.2.0-6.1mdv2007.0.i586.rpm
 eae36b8ab1ffca3528154c9aaf2a1cc0  2007.0/i586/wv-1.2.0-6.1mdv2007.0.i586.rpm 
 605b61cd28794f0e2a1657286e2e9b9f  2007.0/SRPMS/wv-1.2.0-6.1mdv2007.0.src.rpm

CS3.0 x86_64

 e57570724d3d286c0f218f0be359de19  corporate/3.0/x86_64/lib64wv-1.0_0-1.0.0-1.3.C30mdk.x86_64.rpm
 f4a7a48698062e11872b962cfce782fe  corporate/3.0/x86_64/lib64wv-1.0_0-devel-1.0.0-1.3.C30mdk.x86_64.rpm
 952c83dee6c42a8d03daa063b8dd4b5d  corporate/3.0/x86_64/wv-1.0.0-1.3.C30mdk.x86_64.rpm 
 bcb4a6f8a6795ab806525a788f9aecdb  corporate/3.0/SRPMS/wv-1.0.0-1.3.C30mdk.src.rpm

CS3.0 i586

 a14668306062c5d70ab19a08cb9c292c  corporate/3.0/i586/libwv-1.0_0-1.0.0-1.3.C30mdk.i586.rpm
 d6ad018517e90969f6dd872610524a7b  corporate/3.0/i586/libwv-1.0_0-devel-1.0.0-1.3.C30mdk.i586.rpm
 c7d9681d497f4f2c48a9f97a997fc142  corporate/3.0/i586/wv-1.0.0-1.3.C30mdk.i586.rpm 
 bcb4a6f8a6795ab806525a788f9aecdb  corporate/3.0/SRPMS/wv-1.0.0-1.3.C30mdk.src.rpm

2006.0 x86_64

 d66a09a81fdc11a12fe48c1115e247ec  2006.0/x86_64/lib64wv-1.0_3-1.0.3-3.1.20060mdk.x86_64.rpm
 50a02068dcdcbf5238b619d7f22b2490  2006.0/x86_64/lib64wv-1.0_3-devel-1.0.3-3.1.20060mdk.x86_64.rpm
 fba9cbca5c8207417353fd777a1578bf  2006.0/x86_64/wv-1.0.3-3.1.20060mdk.x86_64.rpm 
 3da51e07d25e318ce98d027361ca0d38  2006.0/SRPMS/wv-1.0.3-3.1.20060mdk.src.rpm

References