CVE Catalog
CVE-2017-9433
CriticalSummary
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or remote code execution.
Recommendation
It is recommended to update libmwaw to a version after 2017-04-08 to mitigate this vulnerability.
Original NVD description (English source)
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.