Lucene search

K
cve[email protected]CVE-2004-1297
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1297

2005-01-1005:00:00
web.nvd.nist.gov
16
cve-2004-1297
buffer overflow
process_font_table
convert.c
unrtf
remote code execution
crafted rtf file

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.037 Low

EPSS

Percentile

91.7%

Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.

Affected configurations

NVD
Node
zack_smithunrtfMatch0.19.3

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.037 Low

EPSS

Percentile

91.7%