CVE-2017-9433 in libmwaw
Summary
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/04/2017
Disclosure
06/04/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 101952 | Document Liberation Project libmwaw MsWrd1Parser.cxx readFootnoteCorrespondance memory corruption | 119 | Not defined | Official fix | CVE-2017-9433 |