CVE-2004-1297

Description

Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.

How to fix CVE-2004-1297

To remediate CVE-2004-1297, upgrade the affected package to a fixed version below.

• Debian/unrtf—upgrade to 0.19.3-1.1 or later

Is CVE-2004-1297 being exploited?

Moderate — EPSS is 6.0%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 0.19.3-1.1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2004-1297