CVE-2006-2197 - Vulnerability Details - OpenCVE

Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.01403.

Key SSVC decision points have not yet been added.

Vendors	Products
Wvware	Wv2

Configuration 1 [-]

OR	cpe:2.3:a:wvware:wv2::::::::
	cpe:2.3:a:wvware:wv2:0.2.2:::::::*

No data.

No data.

Advisories

Source	ID	Title
Debian DSA	DSA-1100-1	New wv2 packages fix integer overflow
EUVD	EUVD-2006-2198	Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.
Ubuntu USN	USN-300-1	wv2 vulnerability

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/20665
http://secunia.com/advisories/20688
http://secunia.com/advisories/20689
http://secunia.com/advisories/20826
http://secunia.com/advisories/20844
http://secunia.com/advisories/20899
http://securitytracker.com/id?1016313
http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094
http://www.debian.org/security/2006/dsa-1100
http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:109
http://www.novell.com/linux/security/advisories/2006_38_security.html
http://www.securityfocus.com/bid/18437
http://www.vupen.com/english/advisories/2006/2350
https://exchange.xforce.ibmcloud.com/vulnerabilities/27184
https://usn.ubuntu.com/300-1/

History

No history.

MITRE

Status: PUBLISHED

Assigner: debian

Published: 2006-06-15T10:00:00

Updated: 2024-08-07T17:43:28.333Z

Reserved: 2006-05-04T00:00:00

Link: CVE-2006-2197

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-06-15T10:02:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-2197

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-15T00:00:00", "descriptions": [{"lang": "en", "value": "Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-03T20:57:01", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"name": "20899", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20899"}, {"name": "ADV-2006-2350", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2350"}, {"name": "20844", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20844"}, {"name": "wvware-wv2-word-overflow(27184)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184"}, {"name": "20689", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20689"}, {"name": "GLSA-200606-24", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml"}, {"name": "20826", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20826"}, {"name": "20665", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20665"}, {"name": "USN-300-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "https://usn.ubuntu.com/300-1/"}, {"name": "20688", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20688"}, {"name": "SUSE-SR:2006:015", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"name": "MDKSA-2006:109", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109"}, {"name": "18437", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18437"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094"}, {"name": "DSA-1100", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-1100"}, {"name": "1016313", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016313"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@debian.org", "ID": "CVE-2006-2197", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20899", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20899"}, {"name": "ADV-2006-2350", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2350"}, {"name": "20844", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20844"}, {"name": "wvware-wv2-word-overflow(27184)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184"}, {"name": "20689", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20689"}, {"name": "GLSA-200606-24", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml"}, {"name": "20826", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20826"}, {"name": "20665", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20665"}, {"name": "USN-300-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/300-1/"}, {"name": "20688", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20688"}, {"name": "SUSE-SR:2006:015", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"name": "MDKSA-2006:109", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109"}, {"name": "18437", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18437"}, {"name": "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094", "refsource": "CONFIRM", "url": "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094"}, {"name": "DSA-1100", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1100"}, {"name": "1016313", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016313"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:43:28.333Z"}, "title": "CVE Program Container", "references": [{"name": "20899", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20899"}, {"name": "ADV-2006-2350", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2350"}, {"name": "20844", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20844"}, {"name": "wvware-wv2-word-overflow(27184)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184"}, {"name": "20689", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20689"}, {"name": "GLSA-200606-24", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml"}, {"name": "20826", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20826"}, {"name": "20665", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20665"}, {"name": "USN-300-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "https://usn.ubuntu.com/300-1/"}, {"name": "20688", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20688"}, {"name": "SUSE-SR:2006:015", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"name": "MDKSA-2006:109", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109"}, {"name": "18437", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18437"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094"}, {"name": "DSA-1100", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-1100"}, {"name": "1016313", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016313"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2006-2197", "datePublished": "2006-06-15T10:00:00", "dateReserved": "2006-05-04T00:00:00", "dateUpdated": "2024-08-07T17:43:28.333Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wvware:wv2:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D9ECBF1-45ED-42AF-8854-6BA2D685D85D", "versionEndIncluding": "0.2.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:wvware:wv2:0.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "B0AB2FAA-427C-4313-B7AF-31829E58C367", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document."}, {"lang": "es", "value": "Desbordamiento de entero en WV2 anterior a v0.2.3 podr\u00eda permitir a atacantes dependientes de contexto para ejecutar c\u00f3digo arbitrario a trav\u00e9s de un documento de Microsoft Word."}], "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nDebian, wv2, 0.2.2-1", "id": "CVE-2006-2197", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-15T10:02:00.000", "references": [{"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20665"}, {"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20688"}, {"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20689"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20826"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20844"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20899"}, {"source": "security@debian.org", "url": "http://securitytracker.com/id?1016313"}, {"source": "security@debian.org", "url": "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094"}, {"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.debian.org/security/2006/dsa-1100"}, {"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml"}, {"source": "security@debian.org", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109"}, {"source": "security@debian.org", "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"source": "security@debian.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/18437"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2350"}, {"source": "security@debian.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184"}, {"source": "security@debian.org", "url": "https://usn.ubuntu.com/300-1/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20665"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20688"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20689"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20826"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20844"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20899"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016313"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.debian.org/security/2006/dsa-1100"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:109"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/18437"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2350"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27184"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://usn.ubuntu.com/300-1/"}], "sourceIdentifier": "security@debian.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}