CVE-2014-8123: Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a de...

Security readout for executives and security teams

CVE-2014-8123 is a buffer overflow in Antiword 0.37, a tool for processing Word documents. A maliciously crafted document can crash the application. The public sources describe denial of service only; they do not show code execution, active exploitation, or a named fixed release. Exposure is most likely where Antiword 0.37 is installed or used in automated document parsing workflows that process untrusted Word documents. Systems that only process trusted, internal documents have lower practical risk, but should still verify package versions. Prioritize if Antiword processes external documents in production, email, upload, or conversion pipelines. The expected impact is service disruption rather than confirmed data theft or system takeover, based on the supplied sources. Mitigation focus: Inventory systems and workflows using Antiword, especially version 0.37.; Check the Antiword vendor or distribution package guidance for fixed versions.; Upgrade, replace, or disable Antiword where untrusted documents are processed..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.