CVE-2004-0645

CVE-2004-0645 describes a critical buffer overflow vulnerability within the wvHandleDateTimePicture function of the wv library (wvWare) versions 0.7.4 through 0.7.6 and 1.0.0, impacting products like AbiWord. This flaw allows remote attackers to execute arbitrary code by crafting a malicious document containing an excessively long DateTime field. The vulnerability carries a CVSS score of 10.0, indicating maximum severity with a network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 90/100 further emphasizes its critical nature. Despite its high severity, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting it has not garnered significant attention.