Lucene search
GoogleOSV:DLA-133-1HistoryJan 14, 2015 - 12:00 a.m.
unrtf - security update
2015-01-1400:00:00
Google
osv.dev
6
0.079 Low
EPSS
Percentile
94.3%
- CVE-2014-9274
check that accesses to color table stay within bounds
Patches taken from upstream commits:
- CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a
- CVE-2014-9275
various crashes
- CVE-2014-9275: 1df886f2e65f7c512a6217588ae8d94d4bcbc63d
3c7ff3f888de0f0d957fe67b6bd4bec9c0d475f3
For Debian 6 Squeeze, these issues have been fixed in unrtf version 0.19.3-1.1+deb6u1
| CPE | Name | Operator | Version |
|---|---|---|---|
| unrtf | eq | 0.19.3-1.1 |
References
Related
openvas
openvas
Fedora Update for unrtf FEDORA-2014-17281
2015-01-05 00:00:00
Debian: Security Advisory (DSA-3158-1)
2015-02-08 00:00:00
Debian Security Advisory DSA 3158-1 (unrtf - security update)
2015-02-09 00:00:00
debian
debian
[SECURITY] [DSA 3158-1] unrtf security update
2015-02-09 21:34:18
[SECURITY] [DLA 133-1] unrtf security update
2015-01-14 19:11:47
[SECURITY] [DSA 3158-1] unrtf security update
2015-02-09 21:34:18
fedora
fedora
[SECURITY] Fedora 21 Update: unrtf-0.21.7-1.fc21
2015-01-03 19:03:52
gentoo
gentoo
UnRTF: Multiple vulnerabilities
2015-07-07 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : unrtf (MDVSA-2015:007)
2015-01-09 00:00:00
Fedora 21 : unrtf-0.21.7-1.fc21 (2014-17281)
2015-01-05 00:00:00
Debian DLA-133-1 : unrtf security update
2015-03-26 00:00:00
archlinux
archlinux
unrtf: arbitrary code execution
2014-12-16 00:00:00
mageia
mageia
Updated unrtf package fixes security vulnerabilities
2014-12-19 18:06:35
Updated unrtf package fixes security vulnerability
2015-01-09 19:44:12
securityvulns
securityvulns
[ MDVSA-2015:007 ] unrtf
2015-01-13 00:00:00
unrtf memory corruption
2015-01-13 00:00:00
osv
osv
unrtf - security update
2015-02-09 00:00:00
debiancve
debiancve
CVE-2014-9275
2014-12-09 23:59:11
CVE-2014-9274
2014-12-09 23:59:10
nvd
nvd
CVE-2014-9275
2014-12-09 23:59:11
CVE-2014-9274
2014-12-09 23:59:10
cve
cve
CVE-2014-9275
2014-12-09 23:59:11
CVE-2014-9274
2014-12-09 23:59:10
cvelist
cvelist
CVE-2014-9275
2014-12-09 22:52:00
CVE-2014-9274
2014-12-09 22:52:00
prion
prion
Deserialization of untrusted data
2014-12-09 23:59:00
Out-of-bounds
2014-12-09 23:59:00
ubuntucve
ubuntucve
CVE-2014-9274
2014-12-09 00:00:00
CVE-2014-9275
2014-12-09 00:00:00