Lucene search

K
mageiaGentoo FoundationMGASA-2014-0533
HistoryDec 19, 2014 - 6:06 p.m.

Updated unrtf package fixes security vulnerabilities

2014-12-1918:06:35
Gentoo Foundation
advisories.mageia.org
9

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.3%

Updated unrtf package fixes security vulnerabilities: Michal Zalewski reported an out-of-bounds memory access vulnerability in unrtf. Processing a malformed RTF file could lead to a segfault while accessing a pointer that may be under the attacker’s control. This would lead to a denial of service (application crash) or, potentially, the execution of arbitrary code (CVE-2014-9274). Hanno BΓΆck also reported a number of other crashes in unrtf (CVE-2014-9275).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchunrtf<Β 0.21.7-1unrtf-0.21.7-1.mga4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.3%