Approved changes feed: RSS · Atom

cpe:2.3:a:libwpd:libwpd:0.8.8:*:*:*:*:*:*:*

part: a version: 0.8.8 update: *

VendorLibwpd (de8f4dab-485d-5e3c-bb46-716aa916acc6)
ProductLibwpd (081afa34-2b5a-541c-94e0-808b9467ef5a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libwpd purl2cpe 2026-06-01 10:11:11.003781
pkg:deb/ubuntu/libwpd purl2cpe 2026-06-01 10:11:11.003782
pkg:github/chlorm-forks/libwpd purl2cpe 2026-06-01 10:11:11.003784
pkg:github/cpjreynolds/libwpd purl2cpe 2026-06-01 10:11:11.003785
pkg:rpm/centos/libwpd purl2cpe 2026-06-01 10:11:11.003786
pkg:rpm/fedora/libwpd purl2cpe 2026-06-01 10:11:11.003788
pkg:rpm/opensuse/libwpd purl2cpe 2026-06-01 10:11:11.003789
pkg:sourceforge/libwpd purl2cpe 2026-06-01 10:11:11.003791

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2149 vulnerable 2026-06-08 05:00:53.040053 Details available
The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report this issue as an integer overflow.
Published: 2012-06-21T15:00:00.000Z
Updated: 2024-08-06T19:26:08.516Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.