Libmwaw Project

First CVE: Jun 5, 2017Active for: 9 yearsTotal CVEs: 1

Libmwaw is a specialized library for parsing legacy document formats from older Mac applications, presenting a narrow and niche attack surface centered on file-format parsing and data deserialization. The observed vulnerabilities concentrate on memory-buffer handling issues, a characteristic concern for parsers processing untrusted binary file structures. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
1
Total CVEs
Bottom 1%
1.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
9.8
Avg CVSS Score
Higher Avg CVSS Score than 91% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Libmwaw Project over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 5, 2017
9 years ago
Most Recent CVE
Jun 5, 2017
3,336 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (1 CVEs).

1 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance func
Jun 5, 20179.830NONO

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products1 CVEs
Severity distribution among all CVEs352,294 CVEs
Critical
Attack Vector
Local0 (0.0%)
Network1 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (1 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Libmwaw Project.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Libmwaw Project — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Libmwaw Project's Products

Top CWEs