What’s Vulnerable › Vulnerabilities

CVE-2017-9433

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-05 · updated 2026-06-17
• Weakness: CWE-119

Description

Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.

Affected products

• Libmwaw Project Libmwaw: through 0.3.11

References

• http://www.debian.org/security/2017/dsa-3875
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1037
• https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f/
• http://www.debian.org/security/2017/dsa-3875
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1037
• https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f/

Get alerted when CVE-2017-9433 or the next vulnerability affects your stack