Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2005-2972 | First vendor Publication | 2005-10-23 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5.1 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2972 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 5 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200510-17 (AbiWord) File : nvt/glsa_200510_17.nasl |
| 2008-09-04 | Name : FreeBSD Ports: koffice File : nvt/freebsd_koffice.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 894-1 (abiword) File : nvt/deb_894_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 20015 | AbiWord RTF Importer ie_imp_RTF.cpp Multiple Overflows Multiple remote overflows exist in AbiWord. The 'ParseLevelText()', 'getCharsInsideBrace()', 'HandleLists()', and 'HandleAbiLists()' functions in 'ie_imp_RTF.cpp' fail to perform proper bounds checking resulting in multiple stack-based buffer overflows. With a specially crafted RTF file, a remote attacker can cause arbitrary code execution resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-894.nasl - Type : ACT_GATHER_INFO |
| 2006-05-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_9cd52bc6a21311dab410000e0c2e438a.nasl - Type : ACT_GATHER_INFO |
| 2006-01-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-203-1.nasl - Type : ACT_GATHER_INFO |
| 2005-10-24 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200510-17.nasl - Type : ACT_GATHER_INFO |
| 2005-10-19 | Name : The remote Fedora Core host is missing a security update. File : fedora_2005-989.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:21:48 |
|
| 2024-11-28 12:07:26 |
|
| 2023-11-07 21:48:07 |
|
| 2021-05-04 12:03:11 |
|
| 2021-04-22 01:03:27 |
|
| 2020-05-23 01:36:53 |
|
| 2020-05-23 00:16:50 |
|
| 2018-10-04 00:19:25 |
|
| 2016-06-28 15:21:36 |
|
| 2016-04-26 13:48:51 |
|
| 2014-02-17 10:32:55 |
|
| 2013-05-11 11:31:55 |
|
