CVE-2004-0645: abisource community_abiword
Vulnerability summary
CVE-2004-0645 is a high (CVSS 10.0) vulnerability in abisource community_abiword. EPSS estimates a 8.45% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Timeline
- 13-07-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
8.45%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
No change 0.00 pp
From 8.45% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundExploit Reference (idefense.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- abiword< 1.0.2+cvs.2002.06.05-1woody2 | < 2.0.8
- wv< 0.7.1+rvt-2woody3 | < 1.0.2-0.1
Abisource1 product
- community_abiword2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7
Wvware1 product
- wvware0.7.4 | 0.7.5 | 0.7.6 | 1.0
3 vendors · 4 products
References
11 links- www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.htmlX Refsource CONFIRM
- www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:077Vendor AdvisoryX Refsource MANDRAKE
- www.idefense.com/application/poi/display?id=115&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEExploitPatchVendor Advisory