Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Gentoo 200501-15 Normal: UnRTF Buffer Overflow Allowing Code Execution

gentoo
Calendar Grey January 11, 2005
Scroller Gentoo
A vulnerability in UnRTF involving buffer overflow enables malicious users to run arbitrary code through a specially crafted RTF document. Update advised.
A buffer overflow in UnRTF allows an attacker to execute arbitrary code by way of a specially crafted RTF file.

Summary

Gentoo Linux Security Advisory GLSA 200501-15 https://security.gentoo.org/ Severity: Normal Title: UnRTF: Buffer overflow Date: January 10, 2005 Bugs: #74480 ID: 200501-15

Synopsis ======= A buffer overflow in UnRTF allows an attacker to execute arbitrary code by way of a specially crafted RTF file.
Background ========= UnRTF is a utility to convert files in the Rich Text Format into other formats.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/unrtf < 0.19.3-r1 >= 0.19.3-r1
========== An unchecked strcat() in unrtf may overflow the bounds of a static buffer.
Impact ===== Using a specially crafted file, possibly delivered by e-mail or over the...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround