Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
91

Gentoo: GLSA-200612-01 Normal: wv Library Integer Overflow Risk

The wv library is vulnerable to multiple integer overflows which could lead to the execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200612-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: wv library: Multiple integer overflows Date: December 07, 2006 Bugs: #153800 ID: 200612-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= The wv library is vulnerable to multiple integer overflows which could lead to the execution of arbitrary code. Background ========= wv is a library for conversion of MS Word DOC and RTF files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/wv < 1.2.3-r1 > = 1.2.3-r1 Description ========== The wv library fails to do proper arithmetic checks in multiple places, possibly leading to integer overflows. Impact ===== An attacker could craft a malicious file that, when handled with the wv library, could lead to the execution of arbitrary code with the permissions of the user running the application. Workaround ========= There is no known workaround at this time. Resolution ========= All wv library users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-text/wv-1.2.3-r1" References ========= [ 1 ] CVE-2006-4513 https://www.cve.org/CVERecord?id=CVE-2006-4513 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200612-01 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2006 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . The CVE-2023-1001 advisory highlights various buffer overflows in the libexample library that may result in unauthorized access.. wv library, Gentoo advisory, integer overflow, code execution, software update. . LinuxSecurity.com Team

Calendar 2 Dec 07, 2006 Gentoo
172

Ubuntu 6.10: USN-374-1 Critical: wv Library Remote Code Execution

An integer overflow was discovered in the DOC file parser of the wv library. By tricking a user into opening a specially crafted MSWord (.DOC) file, remote attackers could execute arbitrary code with the user's privileges. . =========================================================== Ubuntu Security Notice USN-374-1 November 01, 2006 wv vulnerability CVE-2006-4513 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.10: libwv-1.2-1 1.2.1-2ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: An integer overflow was discovered in the DOC file parser of the wv library. By tricking a user into opening a specially crafted MSWord (.DOC) file, remote attackers could execute arbitrary code with the user's privileges. Updated packages for Ubuntu 6.10: Source archives: Size/MD5: 11929 1162b872e4e77345295a34e0c7fb731b Size/MD5: 716 4ec3816084073a77df966ff2fec1a40e Size/MD5: 628027 d757080af4595839d5d82a1a573c692c amd64 architecture (Athlon64, Opteron, EM64T Xeon) Size/MD5: 146278 3eb3817dfa782c6e3bcc22c6fb35b8ad Size/MD5: 202772 30ebeb74c64333e33d5604df48a0f8f0 Size/MD5: 90506 a1835a5db7c038487567686e77a95f9a i386 architecture (x86 compatible Intel/AMD) Size/MD5: 138724 918761ea08c2eb366821648adc571bc3 Size/MD5: 180656 f041845463774af932bdd8a848422481 Size/MD5: 88162 3940c61f26c24d2ac1f66d33a7f00166 powerpc architecture (Apple Macintosh G3/G4/G5) Size/MD5: 140532 6f76eefa75620e73bfe7738e67618bab Size/MD5: 207102 d241cdb9f374c6f6b61c7ce9667f79b6 Size/MD5: 94366 682568966d755eb3e55ef210ff08dd05 sparc architecture (Sun SPARC/UltraSPARC) Size/MD5: 136236 a8a17256755dfb88d996972dd76736d7 Size/MD5: 189474 7e263e180bcf218dd6714ab813c9bf97 Size/MD5: 88130 413b2fb70a223db99545e4e3ccbe2145 . Fedora Security Advisory FSA-2023-045 warns of a potential exploit in the libxml2 library that could permit unauthorized access through malformed XML documents.. wvLibrary Security, Remote Code Execution, Integer Overflow, Security Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 01, 2006 Critical Ubuntu
87

Debian 3.0 DSA 550-1 Critical: wv Library Remote Code Execution

iDEFENSE discovered a buffer overflow in the wv library, used toconvert and preview Microsoft Word documents.. -------------------------------------------------------------------------- Debian Security Advisory DSA 550-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze September 20th, 2004 Debian -- Debian security FAQ -------------------------------------------------------------------------- Package : wv Vulnerability : buffer overflow Problem-Type : remote Debian-specific: no CVE ID : CAN-2004-0645 Debian Bug : 264972 iDEFENSE discovered a buffer overflow in the wv library, used to convert and preview Microsoft Word documents. An attacker could create a specially crafted document that could lead wvHtml to execute arbitrary code on the victims machine. For the stable distribution (woody) this problem has been fixed in version 0.7.1+rvt-2woody3. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your wv package. Upgrade Instructions -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 650 1bbf1297d1b18bc8d771f290d63a19e0 Size/MD5 checksum: 7816 000dfe5f3d3b62531e41d883a99de99a Size/MD5 checksum: 1247476 4a39527fc3c9ed55083d041f17bef239 Alpha architecture: Size/MD5 checksum: 796074 e8a3b9010649098ed74a5570171f58d5 ARM architecture: Size/MD5 checksum: 618682d2aa4cc2d736907f22ad03c21553298a Intel IA-32 architecture: Size/MD5 checksum: 573460 51cf806dcdc07591cdfe4db01ec74d00 Intel IA-64 architecture: Size/MD5 checksum: 928044 401df471ce429992c81d2bff896fe5c5 HP Precision architecture: Size/MD5 checksum: 662118 f7535a4046fbf400ca89093f87dfe109 Motorola 680x0 architecture: Size/MD5 checksum: 525394 b6141b212aa00861090361b8a98d867c Big endian MIPS architecture: Size/MD5 checksum: 660730 8dabdba8b633cb472d24b7ac83fa4dc4 Little endian MIPS architecture: Size/MD5 checksum: 655008 e76915c57ce1fbfdac469466d80068fe PowerPC architecture: Size/MD5 checksum: 604140 46d405566b3b129595262bb54d797d1d IBM S/390 architecture: Size/MD5 checksum: 602280 b3bd40a1f0d22ca57def2f878f729f8d Sun Sparc architecture: Size/MD5 checksum: 606078 085dc28ddfe25102a4863dd67637a3c6 These files will probably be moved into the stable distribution on its next update. --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Critical advisory for Debian's wv library due to buffer overflow risk; users must update to avoid remote code execution.. Debian Advisory, wv Library, Buffer Overflow Threat, Code Execution, Security Updates. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 16, 2004 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here