CVE-2016-10091
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of...
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
CVE-2016-10091- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
CVE-2016-10091- Updated
- 2026-11-02
EUVDEUVD-2016-1283 No score
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
EUVD-2016-1283- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5hp-qp98-7ggj
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of...
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
GHSA-v5hp-qp98-7ggj- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
CVE-2016-10091- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-10091
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
DEBIAN-CVE-2016-10091- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10091
Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.
- Record
UBUNTU-CVE-2016-10091- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0007 No score
Updated unrtf package fixes security vulnerability
A Stack-based buffer overflow has been found in unrtf 0.21.9, which affects functions including cmd_expand, cmd_emboss and cmd_engrave (CVE-2016-10091).
- Record
MGASA-2017-0007- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-10091 is a high vulnerability (CVSS 7.5) in Unrtf Project Unrtf, published January 6, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. Fixed in unrtf 0.21.9-clean-3.
References
hg.savannah.gnu.org/hgweb/unrtf/rev/3b16893a6406
securityfocus.com/bid/95173
openwall.com/lists/oss-security/2016/12/31/3
bugzilla.redhat.com/show_bug.cgi?id=1409546
nvd.nist.gov/vuln/detail/CVE-2016-10091
Show 8 moreShow less
github.com/advisories/GHSA-v5hp-qp98-7ggj
security-tracker.debian.org/tracker/CVE-2016-10091
advisories.mageia.org/MGASA-2017-0007.html
bugs.mageia.org/show_bug.cgi?id=20052
bugs.debian.org/cgi-bin/bugreport.cgi?bug=849705
ubuntu.com/security/CVE-2016-10091
cve.org/CVERecord?id=CVE-2016-10091