CVE-2007-1735

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer selection (PRS) name in a Wordperfect document.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/24664Vendor Advisory
http://securityreason.com/securityalert/2489
http://www.nop-art.net/advisories/wpwinX3.txtExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/464046/100/0/threaded
http://www.securityfocus.com/bid/23177Exploit, Vendor Advisory
http://www.vupen.com/english/advisories/2007/1145Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33286
https://www.exploit-db.com/exploits/3593
http://secunia.com/advisories/24664Vendor Advisory
http://securityreason.com/securityalert/2489
http://www.nop-art.net/advisories/wpwinX3.txtExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/464046/100/0/threaded
http://www.securityfocus.com/bid/23177Exploit, Vendor Advisory
http://www.vupen.com/english/advisories/2007/1145Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33286
https://www.exploit-db.com/exploits/3593

Timeline

Published: Mar 28, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-17367.5Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows CVE-2007-17377.5Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attac CVE-2007-17386.9TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by CVE-2007-17397.8Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a d CVE-2007-17416.2Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local u CVE-2007-17423.7suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root CVE-2007-17434.4suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local u CVE-2007-17446.3Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users o CVE-2007-17457.1The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unkno CVE-2007-17479.3Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote at CVE-2007-174810.0Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Serve CVE-2007-17499.3Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01