unrtf: code execution
| Package(s): | unrtf | CVE #(s): | CVE-2014-9274 CVE-2014-9275 | ||||||||||||||||||||||||
| Created: | December 23, 2014 | Updated: | July 7, 2015 | ||||||||||||||||||||||||
| Description: | From the CVE entries:
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999". (CVE-2014-9274) UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file. (CVE-2014-9275) | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||