ALT Linux Team

Package unrtf update in sisyphus on 2014-12-16

ALT-PU-2014-2455-1

Package unrtf updated to version 0.21.7-alt1 for branch sisyphus in task 136584.

Closed vulnerabilities

Published: 2014-12-09
Modified: 2025-04-12

CVE-2014-9274

UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".

Severity: HIGH (7.5) Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
Published: 2014-12-09
Modified: 2025-04-12

CVE-2014-9275

UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.

Severity: HIGH (7.5) Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top