CVE-2005-2971: kde koffice

EPSS trend

Probability

6.41%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.41% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (scary.beasts.org)
Maturity: unknown

References

18 links

secunia.com/advisories/17480Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1015035VDB EntryX Refsource SECTRACK
slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.388487Vendor AdvisoryX Refsource SLACKWARE
scary.beasts.org/security/CESA-2005-005.txtX Refsource MISCExploitVendor Advisory
www.novell.com/linux/security/advisories/2005_25_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/17171Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200510-12.xmlVendor AdvisoryX Refsource GENTOOPatch
secunia.com/advisories/17212Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17332Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2005/dsa-872Vendor AdvisoryX Refsource DEBIAN

Show all 18 references

www.redhat.com/archives/fedora-announce-list/2005-October/msg00042.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/17486Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17190Third Party AdvisoryX Refsource SECUNIA
usn.ubuntu.com/202-1/Vendor AdvisoryX Refsource UBUNTU
www.kde.org/info/security/advisory-20051011-1.txtX Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/17145/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/15060VDB EntryX Refsource BIDPatch
exchange.xforce.ibmcloud.com/vulnerabilities/22562VDB EntryX Refsource XF

Related vulnerabilities

CVE-2005-0206asciiptex+272.99%21y ago15-02-2005 05:00The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.CVE-2005-3624conectivalinux+312.30%20y ago06-01-2006 22:00The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.CVE-2005-3625conectivalinux+313.82%20y ago06-01-2006 22:00Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."CVE-2005-3626conectivalinux+313.38%20y ago06-01-2006 22:00Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2012-3455kdekoffice5.29%14y ago20-08-2012 19:00Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document. NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.CVE-2004-0888debiancups+209.51%21y ago26-10-2004 04:00Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

All vulnerabilities inkoffice

CVE-2005-2971: kde koffice

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References