Description
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 2
- DSA-550-1 wv - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-579-1 abiword - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-579 vendor-advisory
- http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html
- 7761 vdb-entry
- GLSA-200407-11 vendor-advisory
- MDKSA-2004:077 vendor-advisory
- 20040709 wvWare Library Buffer Overflow Vulnerability third-party-advisory
- wvware-wvhandledatetimepicture-bo(16660) vdb-entry
- http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch
- CLA-2004:863 vendor-advisory
- FLSA:1906 vendor-advisory