Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2007-5395

Published: 08/11/2007 Updated: 15/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Link Grammar

Vulnerability Summary

Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote malicious users to execute arbitrary code via a long word, as reachable through the separate_sentence function.

Vulnerable Product Search on Vulmon Subscribe to Product

link_grammar link_grammar 4.1b

abiword abiword_link_grammar 4.2.4

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2007-5395 arbitrary code execution via crafted file
Debian Bug report logs - #450695 CVE-2007-5395 arbitrary code execution via crafted file Package: link-grammar; Maintainer for link-grammar is Debian QA Group <packages@qadebianorg>; Source for link-grammar is src:link-grammar (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Fri, 9 Nov 2007 10 ...
Ubuntu Security Notice: link-grammar vulnerability
Alin Rad Pop discovered that AbiWord’s Link Grammar parser did not correctly handle overly-long words If a user were tricked into opening a specially crafted document, AbiWord, or other applications using Link Grammar, could be made to crash ...

References

CWE-119http://secunia.com/secunia_research/2007-78/advisory/http://secunia.com/secunia_research/2007-79/advisory/http://secunia.com/advisories/27300http://secunia.com/advisories/27340https://bugzilla.redhat.com/show_bug.cgi?id=371221http://bugs.gentoo.org/show_bug.cgi?id=196803https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00411.htmlhttp://security.gentoo.org/glsa/glsa-200711-27.xmlhttp://www.ubuntu.com/usn/usn-545-1http://www.securityfocus.com/bid/26365http://secunia.com/advisories/27631http://secunia.com/advisories/27702http://secunia.com/advisories/27783http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=450695http://www.debian.org/security/2007/dsa-1432http://secunia.com/advisories/28101http://www.vupen.com/english/advisories/2007/3771http://www.vupen.com/english/advisories/2007/3770https://exchange.xforce.ibmcloud.com/vulnerabilities/38317http://www.securityfocus.com/archive/1/483370/100/0/threadedhttp://www.securityfocus.com/archive/1/483368/100/0/threadedhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=450695https://usn.ubuntu.com/545-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook