CVE-2007-5395
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.271 Low
EPSS
Percentile
96.8%
Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote attackers to execute arbitrary code via a long word, as reachable through the separate_sentence function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| link_grammar:link_grammar | link grammar | eq | 4.1b |
| abiword:abiword_link_grammar | abiword abiword link grammar | eq | 4.2.4 |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=450695
bugs.gentoo.org/show_bug.cgi?id=196803
secunia.com/advisories/27300
secunia.com/advisories/27340
secunia.com/advisories/27631
secunia.com/advisories/27702
secunia.com/advisories/27783
secunia.com/advisories/28101
secunia.com/secunia_research/2007-78/advisory/
secunia.com/secunia_research/2007-79/advisory/
security.gentoo.org/glsa/glsa-200711-27.xml
www.debian.org/security/2007/dsa-1432
www.securityfocus.com/archive/1/483368/100/0/threaded
www.securityfocus.com/archive/1/483370/100/0/threaded
www.securityfocus.com/bid/26365
www.ubuntu.com/usn/usn-545-1
www.vupen.com/english/advisories/2007/3770
www.vupen.com/english/advisories/2007/3771
bugzilla.redhat.com/show_bug.cgi?id=371221
exchange.xforce.ibmcloud.com/vulnerabilities/38317
www.redhat.com/archives/fedora-package-announce/2007-November/msg00411.html
Related
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.271 Low
EPSS
Percentile
96.8%