CVE-2005-2971
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows...
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
- Record
CVE-2005-2971- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
- Record
CVE-2005-2971- Updated
- 2026-11-02
EUVDEUVD-2005-2971 No score
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
- Record
EUVD-2005-2971- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3vqc-jwrr-3r9x No score
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows...
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
- Record
GHSA-3vqc-jwrr-3r9x- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kofficeDebian:3.1 |
before 1:1.3.5-4.sarge.1, plus listed versions 1:1.3.5-41:1.3.5-4.11:1.3.5-4.21:1.3.5-4.3 |
1:1.3.5-4.sarge.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2971 is a high vulnerability (CVSS 7.5) in Kde Koffice, published October 20, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.41%, the 93rd percentile. Fixed in koffice 1:1.3.5-4.sarge.1.
References
secunia.com/advisories/17480
securitytracker.com/id?1015035
slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487
scary.beasts.org/security/CESA-2005-005.txt
novell.com/linux/security/advisories/2005_25_sr.html
Show 14 moreShow less
gentoo.org/security/en/glsa/glsa-200510-12.xml
debian.org/security/2005/dsa-872
redhat.com/archives/fedora-announce-list/2005-October/msg00042.html
usn.ubuntu.com/202-1
kde.org/info/security/advisory-20051011-1.txt
securityfocus.com/bid/15060
exchange.xforce.ibmcloud.com/vulnerabilities/22562
nvd.nist.gov/vuln/detail/CVE-2005-2971
github.com/advisories/GHSA-3vqc-jwrr-3r9x