All packages
UnRTF vulnerabilities
3 known CVE vulnerabilities in UnRTF, translated and rated.
- CVE-2016-10091High
Multiple stack-based buffer overflows in unrtf version 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the cmd_expand, cmd_emboss, or cmd_engrave functions.
- CVE-2014-9275High
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.
- CVE-2014-9274High
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".