CVE-2016-10091 Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3)....
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/unrtf(Debian:12) | < 0.21.9-clean-3 | 0.21.9-clean-3 |
| debian/unrtf(Debian:13) | < 0.21.9-clean-3 | 0.21.9-clean-3 |
| debian/unrtf(Debian:14) | < 0.21.9-clean-3 | 0.21.9-clean-3 |
| unrtf project unrtf | = 0.21.9 | No fix listed |
References
- Debian Security Tracker CVE-2016-10091 vendor-advisory
- hg.savannah.gnu.org issue-tracking patch third-party-advisory
- [oss-security] 20161231 Re: CVE Request: UnRTF: stack-based buffer overflows in cmd_* functions mailing-list third-party-advisory
- [oss-security] 20170101 Re: CVE Request: UnRTF: stack-based buffer overflows in cmd_* functions mailing-list third-party-advisory
- 95173 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch
- bugs.debian.org issue-tracking