Description
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-894-1 abiword - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20015 vdb-entry
- ADV-2005-2086 vdb-entry
- 17199 third-party-advisory
- DSA-894 vendor-advisory
- USN-203-1 vendor-advisory
- 17551 third-party-advisory
- 17264 third-party-advisory
- http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
- http://www.abisource.com/changelogs/2.2.11.phtml
- 17213 third-party-advisory
- http://scary.beasts.org/security/CESA-2005-006.txt
- 15096 vdb-entry
- GLSA-200510-17 vendor-advisory
- 17200 third-party-advisory