FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-2197

This CVE name corresponds to:

Entered	Topic
2006-12-13	wv2 -- Integer Overflow Vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-2197 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-2197
Phase	Assigned(20060504)

Description

Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.

References

Source	Reference
CONFIRM	http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094
DEBIAN	DSA-1100
GENTOO	GLSA-200606-24
MANDRIVA	MDKSA-2006:109
SUSE	SUSE-SR:2006:015
UBUNTU	USN-300-1
BID	18437
VUPEN	ADV-2006-2350
SECTRACK	1016313
SECUNIA	20665
SECUNIA	20688
SECUNIA	20689
SECUNIA	20826
SECUNIA	20844
SECUNIA	20899
XF	wvware-wv2-word-overflow(27184)