header-logo
Suggest Exploit
vendor:
UnRTF
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: UnRTF
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: CVE-2004-1184
CPE: a:gnu:unrtf
Metasploit: https://www.rapid7.com/db/vulnerabilities/apple-osx-enscript-cve-2004-1184/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2004-1184/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2004-1184/
Other Scripts:
Platforms Tested:
Unknown

GNU UnRTF Buffer Overflow Vulnerability

GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted source, this vulnerability is considered to be remote in nature. Successful exploitation will result in execution of arbitrary code.

Mitigation:

Apply the latest patches or updates provided by the vendor. Avoid opening RTF documents from untrusted or unknown sources.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/12030/info

GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted source, this vulnerability is considered to be remote in nature.

Successful exploitation will result in execution of arbitrary code. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25030.zip

Navigation

Suggest Exploit

Services By CQR