CVE-2005-2971

HIGH 7.5CVE-2005-2971 · Published 20/10/2005 · updated 16/06/2026

In short

CVE-2005-2971 is a HIGH (CVSS 7.5) vulnerability affecting koffice (kde).
Chance of exploitation in the next 30 days (EPSS): 6.4%, higher than 93.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
koffice kde	`= 1.2= 1.2.1= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3_beta1= 1.3_beta2= 1.3_beta3= 1.4= 1.4.1`	No fix yet

Description

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.

References

scary.beasts.org/security/CESA-2005-005.txt · Exploit
secunia.com/advisories/17145 · Patch
secunia.com/advisories/17171
secunia.com/advisories/17190
secunia.com/advisories/17212
secunia.com/advisories/17332
secunia.com/advisories/17480
secunia.com/advisories/17486
securitytracker.com/id
slackware.com/security/viewer.php
debian.org/security/2005/dsa-872
gentoo.org/security/en/glsa/glsa-200510-12.xml · Patch
kde.org/info/security/advisory-20051011-1.txt · Patch
novell.com/linux/security/advisories/2005_25_sr.html

More vulnerabilities in koffice

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free