UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string “{cb-999999999”.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9274
Reference (s):
- BID:71430
- URL: http://www.securityfocus.com/bid/71430
- http://advisories.mageia.org/MGASA-2014-0533.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1170233
- DEBIAN:DSA-3158