unrtf

• Author: kikadf
• Vulnerable: 0.21.5-1
• Unaffected: 0.21.5-2rigel2

Michal Zalewski and Hanno Boeck discovered several vulnerabilities in unrtf, a RTF to other formats converter, leading to a denial of service (application crash) or, potentially, the execution of arbitrary code.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9274
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9275