FreeBSD : wv2 -- Integer Overflow Vulnerability (b9044cc2-8aa5-11db-bd0d-00123ffe8333)

medium Nessus Plugin ID 23850

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Secunia reports :

A vulnerability has been reported in wvWare wv2 Library, which potentially can be exploited by malicious people to compromise an application using the library.

The vulnerability is caused due to an integer overflow error in 'word_helper.h' when handling a Word document. This can be exploited to cause a buffer overflow and may allow arbitrary code execution via a specially crafted Word document.

Solution

Update the affected package.

Plugin Details

Severity: Medium

ID: 23850

File Name: freebsd_pkg_b9044cc28aa511dbbd0d00123ffe8333.nasl

Version: 1.12

Type: local

Family: FreeBSD Local Security Checks

Published: 12/14/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: Medium

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:wv2, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 12/13/2006

Vulnerability Publication Date: 6/12/2006

Reference Information

CVE: CVE-2006-2197

Secunia: 20665

Detections

Analytics