• info
• discussion
• exploit
• solution
• references

LibWPD Library Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has released version 0.8.9 to address this issue. Please see the references for details.


libwpd libwpd library 0.8_8-0.8.6

• Mandriva lib64wpd-0.8_8-0.8.6-1.1mdv2007.0.x86_64.rpm
  Mandriva Linux 2007.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64wpd-0.8_8-devel-0.8.6-1.1mdv2007.0.x86_64.rpm
  Mandriva Linux 2007.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libwpd-0.8_8-0.8.6-1.1mdv2007.0.i586.rpm
  Mandriva Linux 2007.0:
  http://www.mandriva.com/en/download


• Mandriva libwpd-0.8_8-devel-0.8.6-1.1mdv2007.0.i586.rpm
  Mandriva Linux 2007.0:
  http://www.mandriva.com/en/download


• Mandriva libwpd-tools-0.8.6-1.1mdv2007.0.i586.rpm
  Mandriva Linux 2007.0:
  http://www.mandriva.com/en/download


• Mandriva libwpd-tools-0.8.6-1.1mdv2007.0.x86_64.rpm
  Mandriva Linux 2007.0/X86_64:
  http://www.mandriva.com/en/download

Turbolinux FUJI 0

• Turbolinux libwpd-0.8.4-2.i686.rpm
  
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/


• Turbolinux libwpd-devel-0.8.4-2.i686.rpm
  
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

libwpd libwpd library 0.8.2

• Cuyahoga libwpd-0.8.9-i486-1_slack10.2.tgz
  Slackware 10.2:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ libwpd-0.8.9-i486-1_slack10.2.tgz

libwpd libwpd library 0.8.6

• Cuyahoga libwpd-0.8.9-i486-1_slack11.0.tgz
  Slackware 11.0:
  ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ libwpd-0.8.9-i486-1_slack11.0.tgz

libwpd libwpd library 0.8.7

• libwpd libwpd-0.8.9.tar.gz
  http://prdownloads.sourceforge.net/libwpd/libwpd-0.8.9.tar.gz?download