Total vulnerabilities in the database
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
| Software | From | Fixed in |
|---|---|---|
| redhat / enterprise_linux__optional_productivity_applications | - | - |
| redhat / enterprise_linux_desktop | 5.0 | 5.0.x |
| libwpd / libwpd | 0.8.8 | 0.8.8.x |
| apache / openoffice.org | 3.3 | 3.3.x |
| apache / openoffice.org | - | 3.4.x |