CVE-2016-10091: Buffer Overflow
It was found that unrtf is vulnerable to multiple buffer overflow flaws in cmd functions. If any exposed application uses unrtf to process untrusted input, these flaws might lead to a denial-of-service.
References:
http://seclists.org/oss-sec/2016/q4/786
Originally reported in:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849705
Patch:
http://hg.savannah.gnu.org/hgweb/unrtf/rev/3b16893a6406
Other sources
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmdexpand function, (2) cmdemboss function, or (3) cmdengrave function.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10091?
CVE-2016-10091 is classified as a high severity vulnerability due to potential denial-of-service risks.
How do I fix CVE-2016-10091?
To remediate CVE-2016-10091, upgrade to unrtf version 0.21.10-clean-1 or later.
Which versions of unrtf are affected by CVE-2016-10091?
Versions of unrtf up to and including 0.21.9-clean-2 are vulnerable to CVE-2016-10091.
What types of exploits are associated with CVE-2016-10091?
CVE-2016-10091 is primarily exploitable via buffer overflow flaws that could lead to denial-of-service conditions.
Is CVE-2016-10091 present in Debian packages?
Yes, CVE-2016-10091 affects Debian packages of unrtf, specifically versions prior to 0.21.10-clean-1.