CVE-2014-9274: Buffer Overflow
Michal Zalewski reported [1] an out-of-bounds memory access vulnerability in unrtf. Processing a malformed RTF file could lead to a segfault while accessing a pointer that may be under the attacker's control. This would lead to a denial of service (application crash) or, potentially, the execution of arbitrary code.
Hanno Böck also reported [2] a number of other crashes in unrtf.
There has been no response upstream regarding this (it seems that unrtf is no longer being maintained) so there is no patch available as of yet.
[1] https://lists.gnu.org/archive/html/bug-unrtf/2014-11/msg00001.html [2] https://lists.gnu.org/archive/html/bug-unrtf/2014-11/msg00000.html
Other sources
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9274?
CVE-2014-9274 is classified as a high severity vulnerability due to its potential to cause application crashes and possible remote code execution.
How do I fix CVE-2014-9274?
To fix CVE-2014-9274, update to a patched version of UnRTF that is beyond version 0.21.6.
What are the consequences of exploiting CVE-2014-9274?
Exploiting CVE-2014-9274 can lead to a denial of service through application crashes or potentially allow execution of arbitrary code.
Which versions of UnRTF are affected by CVE-2014-9274?
CVE-2014-9274 affects UnRTF versions up to and including 0.21.6.
Is CVE-2014-9274 specific to certain operating systems?
CVE-2014-9274 can affect multiple operating systems including Fedora, Debian, and Mageia, depending on the version of UnRTF used.