← Vulnerability feed

Vulnerability record · CVE-2005-2971 · published 20 October 2005

CVE-2005-2971: Kde koffice vulnerability

Kde · Koffice

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.

7.5 CVSS 2.0 High EPSS 6.4% · top 6.5%
7.5CVSS 2.0 base score
6.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
36References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://scary.beasts.org/security/CESA-2005-005.txt ExploitVendor Advisory
http://secunia.com/advisories/17145/ PatchVendor Advisory
http://secunia.com/advisories/17171
http://secunia.com/advisories/17190
http://secunia.com/advisories/17212
http://secunia.com/advisories/17332
http://secunia.com/advisories/17480
http://secunia.com/advisories/17486
http://securitytracker.com/id?1015035
http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487
http://www.debian.org/security/2005/dsa-872
http://www.gentoo.org/security/en/glsa/glsa-200510-12.xml PatchVendor Advisory
http://www.kde.org/info/security/advisory-20051011-1.txt PatchVendor Advisory
http://www.novell.com/linux/security/advisories/2005_25_sr.html
http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.html
http://www.securityfocus.com/bid/15060 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22562
https://usn.ubuntu.com/202-1/
http://scary.beasts.org/security/CESA-2005-005.txt ExploitVendor Advisory
http://secunia.com/advisories/17145/ PatchVendor Advisory
http://secunia.com/advisories/17171
http://secunia.com/advisories/17190
http://secunia.com/advisories/17212
http://secunia.com/advisories/17332
http://secunia.com/advisories/17480
http://secunia.com/advisories/17486
http://securitytracker.com/id?1015035
http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487
http://www.debian.org/security/2005/dsa-872
http://www.gentoo.org/security/en/glsa/glsa-200510-12.xml PatchVendor Advisory
http://www.kde.org/info/security/advisory-20051011-1.txt PatchVendor Advisory
http://www.novell.com/linux/security/advisories/2005_25_sr.html
http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.html
http://www.securityfocus.com/bid/15060 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22562
https://usn.ubuntu.com/202-1/

Track CVE-2005-2971 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-0888Easy software products cups vulnerabilityMultiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to …EPSS 9.5%10.0CVE-2004-0889Easy software products cups vulnerabilityMultiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (cras…EPSS 6.2%7.5CVE-2012-3455Kde koffice memory buffer overflow vulnerabilityHeap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and ea…EPSS 5.3%7.5CVE-2005-0206Ascii ptex vulnerabilityThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributi…EPSS 3.0%6.8CVE-2006-6120Kde koffice vulnerabilityInteger overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows use…EPSS 4.2%5.0CVE-2005-3624Easy software products cups vulnerabilityThe CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attac…EPSS 2.3%5.0CVE-2005-3626Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-2005-2971), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.