CVE-2005-2972

Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.

• CWE-119

• http://scary.beasts.org/security/CESA-2005-006.txtExploit, Vendor Advisory
• http://secunia.com/advisories/17199Vendor Advisory
• http://secunia.com/advisories/17200Vendor Advisory
• http://secunia.com/advisories/17213Vendor Advisory
• http://secunia.com/advisories/17264Vendor Advisory
• http://secunia.com/advisories/17551Vendor Advisory
• http://www.abisource.com/changelogs/2.2.11.phtml
• http://www.debian.org/security/2005/dsa-894
• http://www.gentoo.org/security/en/glsa/glsa-200510-17.xmlPatch, Vendor Advisory
• http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
• http://www.osvdb.org/20015
• http://www.securityfocus.com/bid/15096
• http://www.vupen.com/english/advisories/2005/2086Vendor Advisory
• https://usn.ubuntu.com/203-1/
• http://scary.beasts.org/security/CESA-2005-006.txtExploit, Vendor Advisory
• http://secunia.com/advisories/17199Vendor Advisory
• http://secunia.com/advisories/17200Vendor Advisory
• http://secunia.com/advisories/17213Vendor Advisory
• http://secunia.com/advisories/17264Vendor Advisory
• http://secunia.com/advisories/17551Vendor Advisory
• http://www.abisource.com/changelogs/2.2.11.phtml
• http://www.debian.org/security/2005/dsa-894
• http://www.gentoo.org/security/en/glsa/glsa-200510-17.xmlPatch, Vendor Advisory
• http://www.mail-archive.com/debian-bugs-rc%40lists.debian.org/msg28251.html
• http://www.osvdb.org/20015
• http://www.securityfocus.com/bid/15096
• http://www.vupen.com/english/advisories/2005/2086Vendor Advisory
• https://usn.ubuntu.com/203-1/

Published

Oct 23, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2966The Python SVG import plugin (diasvg_import.py) for DIA 0.94…
• CVE-2005-2967Format string vulnerability in input_cdda.c in xine-lib 1-be…
• CVE-2005-2968Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute…
• CVE-2005-2969The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.…
• CVE-2005-2970Memory leak in the worker MPM (worker.c) for Apache 2, in ce…
• CVE-2005-2971Heap-based buffer overflow in the KWord RTF importer for KOf…
• CVE-2005-2973The udp_v6_get_port function in udp.c in Linux 2.6 before 2.…
• CVE-2005-2974libungif library before 4.1.0 allows attackers to cause a de…
• CVE-2005-2975io-xpm.c in the gdk-pixbuf XPM image rendering library in GT…
• CVE-2005-2976Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ be…
• CVE-2005-2977The SELinux version of PAM before 0.78 r3 allows local users…
• CVE-2005-2978pnmtopng in netpbm before 10.25, when using the -trans optio…