CVE-2005-2972

MEDIUM 5.1CVE-2005-2972 · Published 23/10/2005 · updated 16/06/2026

In short

CVE-2005-2972 is a MEDIUM (CVSS 5.1) vulnerability affecting community abiword (abisource).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
community abiword abisource	`≤ 2.2.10`	No fix yet

Description

Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.

References

scary.beasts.org/security/CESA-2005-006.txt · Exploit
secunia.com/advisories/17199 · Vendor Advisory
secunia.com/advisories/17200 · Vendor Advisory
secunia.com/advisories/17213 · Vendor Advisory
secunia.com/advisories/17264 · Vendor Advisory
secunia.com/advisories/17551 · Vendor Advisory
abisource.com/changelogs/2.2.11.phtml
debian.org/security/2005/dsa-894
gentoo.org/security/en/glsa/glsa-200510-17.xml · Patch
mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
osvdb.org/20015
securityfocus.com/bid/15096
vupen.com/english/advisories/2005/2086 · Vendor Advisory
usn.ubuntu.com/203-1

More vulnerabilities in community abiword

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free