CVE-2005-2964

Related Files

Debian Linux Security Advisory 894-1

Posted Nov 15, 2005

Authored by Debian | Site security.debian.org

Debian Security Advisory DSA 894-1 - Chris Evans discoverd several buffer overflows in the RTF import mechanism of AbiWord, a WYSIWYG word processor based on GTK 2. Opening a specially crafted RTF file could lead to the execution of arbitrary code.

tags | advisory, overflow, arbitrary

systems | linux, debian

advisories | CVE-2005-2964, CVE-2005-2972

SHA-256 | 274758bf137822499400b3faab5dd8c66fdc5fca9ce222e98d17e12741ff3f4b

Download | Favorite | View

usn-188-1.txt

Posted Oct 4, 2005

Authored by Martin Pitt | Site security.ubuntu.com

iUbuntu Security Notice USN-188-1 - Chris Evans discovered a buffer overflow in the RTF import module of AbiWord. By tricking a user into opening an RTF file with specially crafted long identifiers, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user.

tags | advisory, overflow, arbitrary

advisories | CVE-2005-2964

SHA-256 | 01e1e78f8d01e887963d5567608c06a38b95c46065fb9fc107226f520f9b148b

Download | Favorite | View

Gentoo Linux Security Advisory 200509-20

Posted Oct 4, 2005

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200509-20 - Chris Evans discovered that the RTF import function in AbiWord is vulnerable to a stack-based buffer overflow. Versions less than 2.2.10 are affected.

tags | advisory, overflow

systems | linux, gentoo

advisories | CVE-2005-2964

SHA-256 | b1cd40fd62d17d116d19ef06e704c1b2958ea550798572d0be46c5a2cbcc06c0

Download | Favorite | View