libmwaw 'lib/MsWrd1Parser.cxx' Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	99133
Class:	Boundary Condition Error
CVE:	CVE-2017-9433
Remote:	Yes
Local:	No
Published:	Jun 04 2017 12:00AM
Updated:	Jun 04 2017 12:00AM
Credit:	monor
Vulnerable:	Ubuntu Ubuntu Linux 17.04 Ubuntu Ubuntu Linux 16.10 Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS libmwaw Project libmwaw 0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

libmwaw 'lib/MsWrd1Parser.cxx' Heap Based Buffer Overflow Vulnerability

libmwaw is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code on the affected system. Failed attacks will cause denial-of-service conditions.

libmwaw 'lib/MsWrd1Parser.cxx' Heap Based Buffer Overflow Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

libmwaw 'lib/MsWrd1Parser.cxx' Heap Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libmwaw 'lib/MsWrd1Parser.cxx' Heap Based Buffer Overflow Vulnerability

References:

• dlplibs: Heap-buffer-overflow in MsWrd1Parser::readFootnoteCorrespondance (OSS-Fuzz)
  
• libmwaw Homepage (libmwaw)
  
• libmwaw: Out-of-bounds write in the MsWrd1Parser::readFootnoteCorrespondence fun (RedHat)
  
• ofz#1037 resize vector correctly (libmwaw)