CVE-2016-10091
Fixed in a distro release EPSS 3%
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
Products: unrtf_project unrtf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | unrtf | 0.21.9-clean-3 |
| Debian 13 | unrtf | 0.21.9-clean-3 |
| Debian 14 | unrtf | 0.21.9-clean-3 |