CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer…

published March 28, 2007

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

⚠️ A long printer selection name could open the door to unexpected chaos! In Corel WordPerfect Office X3, a stack-based buffer overflow lurks, ready for a user-assisted attack. 🔥 Think of it like a gourmet restaurant where the chef has left a recipe book open at the top of the stack. If a sneaky patron adds an extra-long ingredient list, it could overflow and cause chaos in the kitchen! If an attacker successfully triggers this vulnerability, they could execute arbitrary code – essentially taking over the user's system. This could lead to data breaches, system corruption, or even malware installation, making it a surprisingly sneaky threat!

Put simply

Think of it like a gourmet restaurant where the chef has left a recipe book open at the top of the stack. If a sneaky patron adds an extra-long ingredient list, it could overflow and cause chaos in the kitchen! This stack-based buffer overflow occurs when an overly long printer selection name is processed in WordPerfect documents, allowing remote attackers to run arbitrary code by crafting a malicious document that the user opens.

What to do

If an attacker successfully triggers this vulnerability, they could execute arbitrary code – essentially taking over the user's system. This could lead to data breaches, system corruption, or even malware installation, making it a surprisingly sneaky threat! To protect yourself, ensure that you update to the latest version of Corel WordPerfect Office. Additionally, educate users to be cautious about opening documents from untrusted sources, as this could trigger the exploit. Regularly review security practices in your organization! You've got this! Stay vigilant, follow these steps, and you'll keep your system secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08652 · 95.1th percentile
Published
2007-03-28T22:00Z
EPSS history
Timeline
  • 28 MAR 22:00Z
    Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer…
    cvelistv5