CVE-2005-2972: Buffer Overflow
First published: Sun Oct 23 2005(Updated: )
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AbiWord | <=2.2.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://scary.beasts.org/security/CESA-2005-006.txt
- http://www.mail-archive.com/debian-bugs-rc@lists.debian.org/msg28251.html
- http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml
- http://www.abisource.com/changelogs/2.2.11.phtml
- http://www.securityfocus.com/bid/15096
- http://www.osvdb.org/20015
- http://secunia.com/advisories/17199
- http://www.debian.org/security/2005/dsa-894
- http://secunia.com/advisories/17200
- http://secunia.com/advisories/17213
- http://secunia.com/advisories/17264
- http://secunia.com/advisories/17551
- http://www.vupen.com/english/advisories/2005/2086
- https://usn.ubuntu.com/203-1/
- http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
Frequently Asked Questions
What is the severity of CVE-2005-2972?
CVE-2005-2972 has been classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2005-2972?
To fix CVE-2005-2972, upgrade to AbiWord version 2.2.11 or later, which addresses the buffer overflow issues.
What systems are affected by CVE-2005-2972?
CVE-2005-2972 affects AbiWord versions prior to 2.2.11, specifically those versions before 2.2.10.
What type of attack is associated with CVE-2005-2972?
CVE-2005-2972 is associated with user-assisted attacks that exploit the vulnerability through specially crafted RTF files.
How can I identify if my system is vulnerable to CVE-2005-2972?
To determine if your system is vulnerable to CVE-2005-2972, check the version of AbiWord installed and ensure it is updated to 2.2.11 or later.
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/remedy
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-historical
- vendor/abisource
- product/community abiword
- canonical/abisource community abiword
- canonical/abiword
- version/abiword/2.2.10