CVE-2005-2972
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow...
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
- Record
CVE-2005-2972- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
- Record
CVE-2005-2972- Updated
- 2026-11-02
EUVDEUVD-2005-2972 No score
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
- Record
EUVD-2005-2972- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hw2f-4q5v-cv5j No score
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow...
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
- Record
GHSA-hw2f-4q5v-cv5j- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
- Record
CVE-2005-2972- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2972 No score
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
- Record
DEBIAN-CVE-2005-2972- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
abiwordDebian:12 |
before 2.4.1-1 | 2.4.1-1 |
abiwordDebian:13 |
before 2.4.1-1 | 2.4.1-1 |
abiwordDebian:3.0 |
before 1.0.2+cvs.2002.06.05-1woody3, plus listed versions 1.0.2+cvs.2002.06.05-1woody2 |
1.0.2+cvs.2002.06.05-1woody3 |
abiwordDebian:3.1 |
before 2.2.7-3sarge2, plus listed versions 2.2.7-32.2.7-3sarge1 |
2.2.7-3sarge2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2972 is a medium vulnerability (CVSS 5.1) in Abisource Community Abiword, published October 23, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.10%, the 90th percentile. Fixed in abiword 2.4.1-1.
References
osvdb.org/20015
vupen.com/english/advisories/2005/2086
secunia.com/advisories/17199
debian.org/security/2005/dsa-894
usn.ubuntu.com/203-1
Show 12 moreShow less
mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
abisource.com/changelogs/2.2.11.phtml
scary.beasts.org/security/CESA-2005-006.txt
securityfocus.com/bid/15096
gentoo.org/security/en/glsa/glsa-200510-17.xml
nvd.nist.gov/vuln/detail/CVE-2005-2972
github.com/advisories/GHSA-hw2f-4q5v-cv5j
security-tracker.debian.org/tracker/CVE-2005-2972