Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service (crash) via a crafted document.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a
    denial of service (crash) via a crafted document. (CVE-2014-8123)

The remote host is affected by the vulnerability described in GLSA-201502-09 (Antiword: User-assisted execution of arbitrary code)

    A buffer overflow vulnerability has been found in wordole.c in Antiword.
  Impact :

    A remote attacker could entice a user to open a specially crafted       document using Antiword, possibly resulting in execution of arbitrary       code with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Security fix for CVE-2014-8123

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
403529	Alpine: antiword: security update to 0.37-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
403529	Alpine: antiword: security update to 0.37-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
401062	Alpine: antiword: security update to 0.37-r2 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
401062	Alpine: antiword: security update to 0.37-r2 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
81232	GLSA-201502-09 : Antiword: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	medium
79926	Fedora 19 : antiword-0.37-17.fc19 (2014-16257)	Nessus	Fedora Local Security Checks	medium
79923	Fedora 20 : antiword-0.37-17.fc20 (2014-16241)	Nessus	Fedora Local Security Checks	medium
79917	Fedora 21 : antiword-0.37-17.fc21 (2014-16163)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2014-8123

critical

Tenable Plugins

critical

critical

critical

critical

medium

medium

medium

medium