CVE-2005-2972

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-23 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.

Affected products

Abisource Community Abiword: through 2.2.10

References

http://scary.beasts.org/security/CESA-2005-006.txt
http://secunia.com/advisories/17199
http://secunia.com/advisories/17200
http://secunia.com/advisories/17213
http://secunia.com/advisories/17264
http://secunia.com/advisories/17551
http://www.abisource.com/changelogs/2.2.11.phtml
http://www.debian.org/security/2005/dsa-894
http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml
http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
http://www.osvdb.org/20015
http://www.securityfocus.com/bid/15096

Get alerted when CVE-2005-2972 or the next vulnerability affects your stack