CVE-2016-10091
HighSummary
Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.
Risk Assessment
This vulnerability may lead to denial-of-service, affecting the availability of services within the organization. Remote attackers could exploit this flaw to disrupt system operations.
Recommendation
It is recommended to update unrtf to the latest version to mitigate this vulnerability. Additionally, monitoring systems for unauthorized access attempts is advised.
Other vulnerabilities in unrtf 0.21.9
See all- CVE-2014-9275High
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.
- CVE-2014-9274High
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".
Original NVD description (English source)
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.