Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism.

Chris Evans discovered several buffer overflows in the RTF import mechanism of AbiWord, a WYSIWYG word processor based on GTK 2. Opening a specially crafted RTF file could lead to the execution of arbitrary code.

Chris Evans discovered a buffer overflow in the RTF import module of AbiWord. By tricking a user into opening an RTF file with specially crafted long identifiers, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200509-20 (AbiWord: RTF import stack-based buffer overflow)

    Chris Evans discovered that the RTF import function in AbiWord is     vulnerable to a stack-based buffer overflow.
  Impact :

    An attacker could design a malicious RTF file and entice the user     to import it in AbiWord, potentially resulting in the execution of     arbitrary code with the rights of the user running AbiWord.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
22760	Debian DSA-894-1 : abiword - buffer overflows	Nessus	Debian Local Security Checks	high
20600	Ubuntu 4.10 / 5.04 : abiword vulnerability (USN-188-1)	Nessus	Ubuntu Local Security Checks	high
19819	GLSA-200509-20 : AbiWord: RTF import stack-based buffer overflow	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2005-2964

critical

Tenable Plugins

high

high

high