CVE-2005-2971

Published: Oct 20, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.

Affected (13)

Products: Kde: Koffice

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Kde Koffice	Version 1.2.1
Kde Koffice	Version 1.2
Kde Koffice	Version 1.3.1
Kde Koffice	Version 1.3.2
Kde Koffice	Version 1.3.3
Kde Koffice	Version 1.3.4
Kde Koffice	Version 1.3.5
Kde Koffice	Version 1.3
Kde Koffice	Version 1.3_beta1
Kde Koffice	Version 1.3_beta2
Kde Koffice	Version 1.3_beta3
Kde Koffice	Version 1.4.1
Kde Koffice	Version 1.4

References (36)

http://scary.beasts.org/security/CESA-2005-005.txt

Source: secalert@redhat.com

ExploitVendor Advisory

http://secunia.com/advisories/17145/

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/17171

Source: secalert@redhat.com

http://secunia.com/advisories/17190

Source: secalert@redhat.com

http://secunia.com/advisories/17212

Source: secalert@redhat.com

http://secunia.com/advisories/17332

Source: secalert@redhat.com

http://secunia.com/advisories/17480

Source: secalert@redhat.com

http://secunia.com/advisories/17486

Source: secalert@redhat.com

http://securitytracker.com/id?1015035

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-872

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200510-12.xml

Source: secalert@redhat.com

PatchVendor Advisory

http://www.kde.org/info/security/advisory-20051011-1.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_25_sr.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/15060

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/22562

Source: secalert@redhat.com

https://usn.ubuntu.com/202-1/

Source: secalert@redhat.com

http://scary.beasts.org/security/CESA-2005-005.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/advisories/17145/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17171

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17190

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17212

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17332

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17480

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17486

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015035

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-872

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200510-12.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.kde.org/info/security/advisory-20051011-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_25_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15060

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/22562

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/202-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.