CVE-2004-0645
CVE-2004-0645
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.
EPSS 8.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
abiword Debian:12
- Affected ranges
- ECOSYSTEM: < 2.0.8
Update to 2.0.8
abiword Debian:13
- Affected ranges
- ECOSYSTEM: < 2.0.8
Update to 2.0.8
wv Debian:12
- Affected ranges
- ECOSYSTEM: < 1.0.2-0.1
Update to 1.0.2-0.1
wv Debian:13
- Affected ranges
- ECOSYSTEM: < 1.0.2-0.1
Update to 1.0.2-0.1
Original sources
- http://www.debian.org/security/2004/dsa-579
- http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html
- http://www.osvdb.org/7761
- http://security.gentoo.org/glsa/glsa-200407-11.xml
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:077
- http://www.idefense.com/application/poi/display?id=115&type=vulnerabilities
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16660
- http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000863
- https://bugzilla.fedora.us/show_bug.cgi?id=1906
- https://nvd.nist.gov/vuln/detail/CVE-2004-0645