CVE-2006-2197 — WV2 vulnerability

CWE-1894 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
1.4%
top 19.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Wvware WV2
Timeline
PublishedJun 15
Latest updateMay 1

Description

Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

▶NVDwvware/wv20.2.3+1

Patches

Patch: secunia.com ↗Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-hcq4-p5g5-43pc: Integer overflow in wv2 before 0↗2022-05-01
▶

📋Vendor Advisories

1
Ubuntu
wv2 vulnerability↗2006-06-15
▶

💬Community

1
Bugzilla
CVE-2006-2197 wv2 integer overflow↗2006-06-14
▶