Buffer overflow in Abiword Link Grammar
CVE-2007-5395
Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote attackers to execute arbitrary code via a long word, as reachable through the separate_sentence function.
Vulnerability class: Buffer Overflow
EPSS: 0.070 (93.5th percentile) — read the EPSS interpretation.
Affected products
- Abiword Abiword_link_grammar — versions 4.2.4
- Link_grammar — versions 4.1b
- N/a — versions n/a
Weakness classification (CWE)
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
- PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
- PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_FEDORA)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN)
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_GENTOO)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN)