CVE-2006-4513: Wvware

Medium severity, CVSS 5.1. EPSS: 3.7% chance of exploitation in the next 30 days.

Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word (DOC) file that produces (1) large LFO clfolvl values in the wvGetLFO_records function or (2) a large LFO nolfo value in the wvGetFLO_PLF function.

Affected products

• Wvware Wvware: up to and including 1.2.2

Published 2006-10-28. Last modified 2026-06-16.