CVE-2014-9274
HighSummary
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".
Risk Assessment
The risk includes service disruption and potential system compromise, leading to loss of confidentiality, integrity, and availability.
Recommendation
It is recommended to immediately update UnRTF to the latest version that fixes this vulnerability and avoid opening untrusted RTF files.
Other vulnerabilities in UnRTF
See all- CVE-2016-10091High
Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.
- CVE-2014-9275High
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.
Original NVD description (English source)
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".