CVE-2007-1466: Sourceforge Wordperfect Document Importer-Exporter

Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file, a different vulnerability than CVE-2007-0002.

Affected products

• Sourceforge Wordperfect Document Importer-Exporter: up to and including 0.8.8

Published 2007-03-16. Last modified 2026-06-16.