UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file.

The remote host is affected by the vulnerability described in GLSA-201507-06 (UnRTF: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in UnRTF. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

CVE-2014-9274 :

check that accesses to color table stay within bounds Patches taken from upstream commits :

  - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a

CVE-2014-9275 :

various crashes . - CVE-2014-9275:
1df886f2e65f7c512a6217588ae8d94d4bcbc63d 3c7ff3f888de0f0d957fe67b6bd4bec9c0d475f3

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Michal Zalewski and Hanno Boeck discovered several vulnerabilities in unrtf, a RTF to other formats converter, leading to a denial of service (application crash) or, potentially, the execution of arbitrary code.

Updated unrtf package fixes security vulnerabilities :

Michal Zalewski reported an out-of-bounds memory access vulnerability in unrtf. Processing a malformed RTF file could lead to a segfault while accessing a pointer that may be under the attacker's control.
This would lead to a denial of service (application crash) or, potentially, the execution of arbitrary code (CVE-2014-9274).

Hanno Bck also reported a number of other crashes in unrtf (CVE-2014-9275).

Update to the latest upstream release. This fixes a couple of security problems. See also the [upstream changelog](http://hg.savannah.gnu.org/hgweb/unrtf/file/f5835113e0ed/Ch angeLog).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
84605	GLSA-201507-06 : UnRTF: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
82116	Debian DLA-133-1 : unrtf security update	Nessus	Debian Local Security Checks	high
81251	Debian DSA-3158-1 : unrtf - security update	Nessus	Debian Local Security Checks	high
80426	Mandriva Linux Security Advisory : unrtf (MDVSA-2015:007)	Nessus	Mandriva Local Security Checks	high
80346	Fedora 21 : unrtf-0.21.7-1.fc21 (2014-17281)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-9275

critical

Tenable Plugins

high

high

high

high

high