Summary
Check the version of unrtf
Solution
Please Install the Updated Packages.
Insight
UnRTF is a command-line program written in C which converts documents in Rich Text Format (.rtf) to HTML, LaTeX, troff macros, and RTF itself.
Converting to HTML, it supports a number of features of Rich Text Format:
* Changes in the text's font, size, weight (bold), and slant (italic) * Underlines and strikethroughs
* Partial support for text shadowing, outlining, embossing, or engraving * Capitalizations
* Superscripts and subscripts
* Expanded and condensed text
* Changes in the foreground and background colors
* Conversion of special characters to HTML entities
Affected
unrtf on Fedora 21
Detection
Get the installed version with the help of detect NVT and check if the version is vulnerable or not.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-9274, CVE-2014-9275 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities