| Vulnerability Name: | CVE-2005-2964 (CCN-22454) | ||||||||||||
| Assigned: | 2005-09-28 | ||||||||||||
| Published: | 2005-09-28 | ||||||||||||
| Updated: | 2017-07-11 | ||||||||||||
| Summary: | Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism. | ||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2005-2964 Source: MITRE Type: CNA CVE-2005-2972 Source: CCN Type: SA16982 AbiWord RTF Importer Buffer Overflow Vulnerability Source: SECUNIA Type: UNKNOWN 16982 Source: SECUNIA Type: UNKNOWN 16990 Source: SECUNIA Type: UNKNOWN 17012 Source: SECUNIA Type: UNKNOWN 17052 Source: SECUNIA Type: UNKNOWN 17070 Source: CCN Type: SA17199 AbiWord RTF Importer Buffer Overflow Vulnerabilities Source: SECUNIA Type: UNKNOWN 17215 Source: SECUNIA Type: UNKNOWN 17551 Source: CCN Type: SECTRACK ID: 1014982 AbiWord Buffer Overflow in RTF Importer May Let Remote Users Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1014982 Source: CCN Type: AbiWord Web site AbiWord Source: CONFIRM Type: Patch http://www.abiword.org/release-notes/2.2.10.phtml Source: DEBIAN Type: UNKNOWN DSA-894 Source: DEBIAN Type: DSA-894 abiword -- buffer overflows Source: CCN Type: GLSA-200509-20 AbiWord: RTF import stack-based buffer overflow Source: GENTOO Type: UNKNOWN GLSA-200509-20 Source: GENTOO Type: UNKNOWN GLSA-200510-04 Source: CCN Type: GLSA-200510-17 AbiWord: New RTF import buffer overflows Source: SUSE Type: UNKNOWN SUSE-SR:2005:023 Source: OSVDB Type: UNKNOWN 19717 Source: CCN Type: OSVDB ID: 19717 AbiWord RTF Document Importer Overflow Source: CCN Type: OSVDB ID: 20015 AbiWord RTF Importer ie_imp_RTF.cpp Multiple Overflows Source: BID Type: UNKNOWN 14971 Source: CCN Type: BID-14971 AbiWord RTF File Processing Buffer Overflow Vulnerability Source: CCN Type: BID-15096 AbiWord Stack-Based Buffer Overflow Vulnerabilities Source: CCN Type: USN-188-1 AbiWord vulnerability Source: UBUNTU Type: UNKNOWN USN-188-1 Source: CCN Type: USN-203-1 Abiword vulnerabilities Source: XF Type: UNKNOWN abiword-rtf-importer-bo(22454) Source: XF Type: UNKNOWN abiword-rtf-importer-bo(22454) Source: SUSE Type: SUSE-SR:2005:023 SUSE Security Summary Report | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||