Description
Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-894-1 abiword - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-188-1 vendor-advisory
- http://www.abiword.org/release-notes/2.2.10.phtml
- 1014982 vdb-entry
- GLSA-200509-20 vendor-advisory
- DSA-894 vendor-advisory
- 14971 vdb-entry
- 17551 third-party-advisory
- 17052 third-party-advisory
- abiword-rtf-importer-bo(22454) vdb-entry
- GLSA-200510-04 vendor-advisory
- 17070 third-party-advisory
- 16982 third-party-advisory
- 19717 vdb-entry
- 17215 third-party-advisory
- 16990 third-party-advisory
- SUSE-SR:2005:023 vendor-advisory
- 17012 third-party-advisory