CVE-2006-4513

Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word (DOC) file that produces (1) large LFO clfolvl values in the wvGetLFO_records function or (2) a large LFO nolfo value in the wvGetFLO_PLF function.

Published: 2006-10-28 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2006-4513 is rated Moderate Risk (51.4/100): CVSS Medium severity, with high exploitation likelihood (EPSS 7.27%, 92th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-4513

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-22 8.37% 7.27% -1.10%
2 2025-06-16 6.59% 8.37% +1.78%
3 2025-06-09 — 6.59% —

Full EPSS history (16 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-4513

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.1 2.0 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 4.9 6.4 [email protected]

Weakness enumeration for CVE-2006-4513

OS Trackers for CVE-2006-4513

vendor priority summary link
alpine — CVE-2006-4513: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0. https://security.alpinelinux.org/vuln/CVE-2006-4513
debian medium CVE-2006-4513 medium priority: Debian including 2 source packages (abiword, wv), 10 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 10. https://security-tracker.debian.org/tracker/CVE-2006-4513
gentoo normal CVE-2006-4513: 1 GLSA(s) (200612-01), 1 atom(s) (app-text/wv); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2006-4513
redhat — — https://access.redhat.com/security/cve/CVE-2006-4513
ubuntu medium CVE-2006-4513 medium priority: Ubuntu including 1 source packages (wv), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1. https://ubuntu.com/security/CVE-2006-4513

Vendor comments (NVD) for CVE-2006-4513

  • Red Hat (2007-02-09T00:00:00)

    Not vulnerable. This issue did not affect versions of wvWare library included in koffice packages as shipped with Red Hat Enterprise Linux 2.1

Affected software / configurations for CVE-2006-4513

Vendor Product Version Raw CPE
wvware wvware <= 1.2.2 cpe:2.3:a:wvware:wvware:*:*:*:*:*:*:*:*

References for CVE-2006-4513

cvelogic Threat Intelligence