CVE-2014-9275
HighSummary
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations or execute malicious code, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update UnRTF to the latest version and to monitor and restrict access to RTF files from untrusted sources.
Other vulnerabilities in UnRTF
See all- CVE-2016-10091High
Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.
- CVE-2014-9274High
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".
Original NVD description (English source)
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.