PT-2005-3813 · Abiword · Abiword

Martin Pitt · Published 2005-10-23 · Updated 2018-10-03 · CVE-2005-2972

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AbiWord versions prior to 2.2.11

Description The issue is related to multiple stack-based buffer overflows in the RTF import feature. This occurs when handling long identifiers in RTF files, which are not properly handled in certain functions. The affected functions include ParseLevelText, getCharsInsideBrace, HandleLists, and HandleAbiLists in the file ie imp RTF.cpp. This allows user-assisted attackers to execute arbitrary code.

Recommendations For AbiWord versions prior to 2.2.11, update to version 2.2.11 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the RTF import feature until a patch is applied. Restrict access to RTF files from untrusted sources to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2005-2972

DSA-894-1

Affected Products

Abiword

References · 18

• 🔥 http://scary.beasts.org/security/CESA-2005-006.txt · Exploit
• https://usn.ubuntu.com/203-1 · Vendor Advisory
• http://secunia.com/advisories/17200 · Vendor Advisory
• http://secunia.com/advisories/17264 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2086 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2972 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2972 · Vendor Advisory
• http://secunia.com/advisories/17551 · Vendor Advisory
• http://debian.org/security/2005/dsa-894 · Vendor Advisory
• http://secunia.com/advisories/17199 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-2972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2972 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200510-17.xml · Vendor Advisory
• http://secunia.com/advisories/17213 · Vendor Advisory
• http://mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html · Note