CVE-2004-0645: Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0....

Security readout for executives and security teams

This is an old document-parsing flaw in wvWare. If a vulnerable system processes a malicious Word document, the parser can overflow memory and may allow attacker-controlled code execution. Business risk is highest where legacy servers, converters, mail gateways, or content-processing pipelines still use wv/wvWare. Likely exposure is limited to legacy Unix/Linux environments or applications that still include wv/wvWare for Word document conversion or indexing. Modern estates may only be exposed through old packages, embedded appliances, archived build images, or document-processing services. Treat as a legacy cleanup priority, not an internet-wide emergency unless wv/wvWare is still used in automated document processing. Arbitrary code execution in parsers can create high impact, but evidence here is historical and lacks current exploitation signals. Mitigation focus: Inventory systems and applications using wv or wvWare.; Apply relevant vendor package updates from maintained distributions.; Remove vulnerable wv/wvWare where document conversion is no longer required..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.