CVE-2007-5395

Published: Nov 8, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote attackers to execute arbitrary code via a long word, as reachable through the separate_sentence function.

Affected (2)

Products: Link Grammar: Link Grammar · Abiword: Abiword Link Grammar

1 product

1 product

Abiword Link Grammar

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Link Grammar Link Grammar	Version 4.1b
Abiword Abiword Link Grammar	Version 4.2.4

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (42)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=450695

Source: PSIRT-CNA@flexerasoftware.com

http://bugs.gentoo.org/show_bug.cgi?id=196803

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27300

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27340

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27631

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27702

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27783

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/28101

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2007-78/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2007-79/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200711-27.xml

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2007/dsa-1432

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/483368/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/483370/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/26365

Source: PSIRT-CNA@flexerasoftware.com

http://www.ubuntu.com/usn/usn-545-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3770

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3771

Source: PSIRT-CNA@flexerasoftware.com

https://bugzilla.redhat.com/show_bug.cgi?id=371221

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38317

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00411.html

Source: PSIRT-CNA@flexerasoftware.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=450695

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.gentoo.org/show_bug.cgi?id=196803

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27300

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27340

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27631

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27702

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27783

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28101

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/secunia_research/2007-78/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/secunia_research/2007-79/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200711-27.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1432

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/483368/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/483370/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26365

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-545-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3770

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3771

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=371221

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/38317

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00411.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.