vendor:
Corel WordPerfect Office X5
by:
Gjoko 'LiquidWorm' Krstic
7.5
CVSS
HIGH
Remote Buffer Overflow
119
CWE
Product Name: Corel WordPerfect Office X5
Affected Version From: 15.0.0.357 (Standard Edition)
Affected Version To: 15.0.0.357 (Standard Edition)
Patch Exists: NO
Related CWE:
CPE: corel:wordperfect_office:x5:15.0.0.357
Platforms Tested: Windows
2010
Corel WordPerfect Office X5 15.0.0.357 (wpd) Remote Buffer Preoccupation PoC
Corel WordPerfect Office X5 is prone to a remote buffer overflow vulnerability because the application fails to perform adequate boundary checks on user supplied input with .WPD (WordPerfect Document) file. Attackers may exploit this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
Mitigation:
Apply patches provided by the vendor.