Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
wvWare库Field.c wvHandleDateTimePicture()函数远程缓冲区溢出漏洞
Vulnerability Description
wvWare是一个用于装载和解析Microsoft Word文件的库。 wvWare wvHandleDateTimePicture()函数存在缓冲区溢出，远程攻击者可以利用这个漏洞构建恶意文档，诱使用户访问，可能以进程权限在系统上执行任意指令。 问题发生在field.c文件中处理文档DateTime字段的wvHandleDateTimePicture()函数中： ... default: temp[0] = *token; temp[1] = '\0'; strcat (timestr， temp);
CVSS Information
N/A
Vulnerability Type
N/A