unrtf project kayıtları
unrtf project üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-121 Stack-based Buffer Overflow1
- CWE-476 NULL Pointer Dereference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
32İzleyin | CVE-2014-9274İstismar yok | UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing unrtf project · unrtf · CWE-119 | Yüksek7,5 | %5,89 Ara 2014 |
31İzleyin | CVE-2014-9275İstismar yok | UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via aunrtf project · unrtf · CWE-119 | Yüksek7,5 | %4,79 Ara 2014 |
31İzleyin | CVE-2016-10091İstismar yok | Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to tunrtf project · unrtf · CWE-119 | Yüksek7,5 | %2,821 Nis 2017 |
30İzleyin | CVE-2025-65411İstismar yok | A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injectiunrtf project · unrtf · CWE-476 | Yüksek7,5 | %0,530 Ara 2025 |
24İzleyin | CVE-2025-65410İstismar yok | A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a craftunrtf project · unrtf · CWE-121 | Orta6,2 | %0,223 Ara 2025 |
- CVE-2014-927432İzleyin
UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing
YüksekCVSS 7,5İstismar yokEPSS %5unrtf project · unrtf9 Ara 2014
- CVE-2014-927531İzleyin
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a
YüksekCVSS 7,5İstismar yokEPSS %4unrtf project · unrtf9 Ara 2014
- CVE-2016-1009131İzleyin
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to t
YüksekCVSS 7,5İstismar yokEPSS %2unrtf project · unrtf21 Nis 2017
- CVE-2025-6541130İzleyin
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecti
YüksekCVSS 7,5İstismar yokEPSS %0unrtf project · unrtf30 Ara 2025
- CVE-2025-6541024İzleyin
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a craft
OrtaCVSS 6,2İstismar yokEPSS %0unrtf project · unrtf23 Ara 2025