CVE-2017-9433

CVE-2017-9433 is a critical out-of-bounds write vulnerability affecting the Document Liberation Project's libmwaw library prior to version 2017-04-08. This heap-based buffer overflow, specifically within the MsWrd1Parser::readFootnoteCorrespondance function, allows for arbitrary code execution. With a CVSS score of 9.8, it is highly severe, requiring no user interaction and allowing for complete compromise of confidentiality, integrity, and availability. Despite its critical nature, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.