CVE-2007-5395

CRITICAL 10.0CVE-2007-5395 · Published 08/11/2007 · updated 16/06/2026

In short

CVE-2007-5395 is a CRITICAL (CVSS 10.0) vulnerability affecting abiword link grammar (abiword), link grammar (link grammar).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
abiword link grammar abiword	`= 4.2.4`	No fix yet
link grammar link_grammar	`= 4.1b`	No fix yet

Description

Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote attackers to execute arbitrary code via a long word, as reachable through the separate_sentence function.

References

bugs.debian.org/cgi-bin/bugreport.cgi
bugs.gentoo.org/show_bug.cgi
secunia.com/advisories/27300 · Vendor Advisory
secunia.com/advisories/27340 · Vendor Advisory
secunia.com/advisories/27631 · Vendor Advisory
secunia.com/advisories/27702 · Vendor Advisory
secunia.com/advisories/27783 · Vendor Advisory
secunia.com/advisories/28101 · Vendor Advisory
secunia.com/secunia_research/2007-78/advisory · Vendor Advisory
secunia.com/secunia_research/2007-79/advisory · Vendor Advisory
security.gentoo.org/glsa/glsa-200711-27.xml
debian.org/security/2007/dsa-1432
securityfocus.com/archive/1/483368/100/0/threaded
securityfocus.com/archive/1/483370/100/0/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free