rPSA-2007-0057-1 libwpd

To: security-announce@xxxxxxxxxxxxxxx, update-announce@xxxxxxxxxxxxxxx
Subject: rPSA-2007-0057-1 libwpd
From: rPath Update Announcements <announce-noreply@xxxxxxxxx>
Date: Fri, 16 Mar 2007 15:04:28 -0400
Cc: full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx, lwn@xxxxxxx
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
User-agent: nail 11.22 3/20/05

rPath Security Advisory: 2007-0057-1
Published: 2007-03-16
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
    Indirect User Deterministic Unauthorized Access
Updated Versions:
    libwpd=/conary.rpath.com@rpl:devel//1/0.8.9-1-0.1

References:
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002
    https://issues.rpath.com/browse/RPL-1115

Description:
    Previous versions of the libwpd package are vulnerable to an
    unauthorized access attack.  When reading certain malformed
    files, libwpd may execute malicious code included in the
    malformed file.

Prev by Date: rPSA-2007-0056-1 gnupg
Next by Date: Re: Your Opinion
Previous by thread: rPSA-2007-0056-1 gnupg
Next by thread: [ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities
Index(es):
- Date
- Thread