AbiWord RTF File Processing Buffer Overflow Vulnerability

Bugtraq ID:	14971
Class:	Boundary Condition Error
CVE:	CVE-2005-2964
Remote:	Yes
Local:	No
Published:	Sep 29 2005 12:00AM
Updated:	Jul 12 2009 05:06PM
Credit:	Chris Evans reported this issue to the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 AbiSource Community AbiWord 2.2.9 - Gentoo Linux AbiSource Community AbiWord 2.2.8 AbiSource Community AbiWord 2.2.7 AbiSource Community AbiWord 2.2.6 AbiSource Community AbiWord 2.2.5 AbiSource Community AbiWord 2.2.4 AbiSource Community AbiWord 2.2.3 AbiSource Community AbiWord 2.2.2 AbiSource Community AbiWord 2.2.1 AbiSource Community AbiWord 2.2 .0 AbiSource Community AbiWord 2.0.12 + Redhat Fedora Core3 AbiSource Community AbiWord 2.0.9 AbiSource Community AbiWord 2.0.8 AbiSource Community AbiWord 2.0.7 AbiSource Community AbiWord 2.0.6 + S.u.S.E. Linux Personal 9.2 AbiSource Community AbiWord 2.0.5 AbiSource Community AbiWord 2.0.4 AbiSource Community AbiWord 2.0.3 AbiSource Community AbiWord 2.0.1
Not Vulnerable:	AbiSource Community AbiWord 2.2.10

AbiWord RTF File Processing Buffer Overflow Vulnerability

AbiWord is susceptible to a buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer while importing RTF files.

This issue likely allows attackers to execute arbitrary machine code in the context of the user running the affected application.

AbiWord RTF File Processing Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AbiWord RTF File Processing Buffer Overflow Vulnerability

Solution:

The vendor has released an updated version of AbiWord to address this issue.

Please see the referenced vendor advisories for more information.


AbiSource Community AbiWord 2.0.1

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.12

• RedHat Fedora abiword-2.0.12-10.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora abiword-2.0.12-10.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora abiword-debuginfo-2.0.12-10.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora abiword-debuginfo-2.0.12-10.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

AbiSource Community AbiWord 2.0.3

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.4

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.5

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.6

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.7

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.8

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.0.9

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2 .0

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.1

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.2

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.3

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.4

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.5

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.6

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.7

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz


• Debian abiword-common_2.2.7-3sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-common_ 2.2.7-3sarge2_all.deb


• Debian abiword-doc_2.2.7-3sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-doc_2.2 .7-3sarge2_all.deb


• Debian abiword-gnome_2.2.7-3sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_alpha.deb


• Debian abiword-gnome_2.2.7-3sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_amd64.deb


• Debian abiword-gnome_2.2.7-3sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_arm.deb


• Debian abiword-gnome_2.2.7-3sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_hppa.deb


• Debian abiword-gnome_2.2.7-3sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_i386.deb


• Debian abiword-gnome_2.2.7-3sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_ia64.deb


• Debian abiword-gnome_2.2.7-3sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_m68k.deb


• Debian abiword-gnome_2.2.7-3sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_mips.deb


• Debian abiword-gnome_2.2.7-3sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_mipsel.deb


• Debian abiword-gnome_2.2.7-3sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_powerpc.deb


• Debian abiword-gnome_2.2.7-3sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_s390.deb


• Debian abiword-gnome_2.2.7-3sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-gnome_2 .2.7-3sarge2_sparc.deb


• Debian abiword-help_2.2.7-3sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-help_2. 2.7-3sarge2_all.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_alpha.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_amd64.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_arm.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_hppa.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_i386.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_ia64.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_m68k.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_mips.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_mipsel.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_powerpc.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_s390.deb


• Debian abiword-plugins-gnome_2.2.7-3sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins -gnome_2.2.7-3sarge2_sparc.deb


• Debian abiword-plugins_2.2.7-3sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_alpha.deb


• Debian abiword-plugins_2.2.7-3sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_amd64.deb


• Debian abiword-plugins_2.2.7-3sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_arm.deb


• Debian abiword-plugins_2.2.7-3sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_hppa.deb


• Debian abiword-plugins_2.2.7-3sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_i386.deb


• Debian abiword-plugins_2.2.7-3sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_ia64.deb


• Debian abiword-plugins_2.2.7-3sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_m68k.deb


• Debian abiword-plugins_2.2.7-3sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_mips.deb


• Debian abiword-plugins_2.2.7-3sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_mipsel.deb


• Debian abiword-plugins_2.2.7-3sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_powerpc.deb


• Debian abiword-plugins_2.2.7-3sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_s390.deb


• Debian abiword-plugins_2.2.7-3sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword-plugins _2.2.7-3sarge2_sparc.deb


• Debian abiword_2.2.7-3sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_alpha.deb


• Debian abiword_2.2.7-3sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_amd64.deb


• Debian abiword_2.2.7-3sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_arm.deb


• Debian abiword_2.2.7-3sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_hppa.deb


• Debian abiword_2.2.7-3sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_i386.deb


• Debian abiword_2.2.7-3sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_ia64.deb


• Debian abiword_2.2.7-3sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_m68k.deb


• Debian abiword_2.2.7-3sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_mips.deb


• Debian abiword_2.2.7-3sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_mipsel.deb


• Debian abiword_2.2.7-3sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_powerpc.deb


• Debian abiword_2.2.7-3sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_s390.deb


• Debian abiword_2.2.7-3sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/a/abiword/abiword_2.2.7-3 sarge2_sparc.deb

AbiSource Community AbiWord 2.2.8

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiSource Community AbiWord 2.2.9

• AbiWord abiword-2.2.10.tar.gz
  http://www.abisource.com/downloads/abiword/2.2.10/source/abiword-2.2.1 0.tar.gz

AbiWord RTF File Processing Buffer Overflow Vulnerability

References:

• AbiWord Home Page (AbiSource Community)
  
• AbiWord v2.2.10 ChangeLog (AbiSource Community)