CVE-2004-1297: Zack Smith Unrtf

High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days.

Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.

Affected products

• Zack Smith Unrtf: version 0.19.3 only

Published 2005-01-10. Last modified 2026-06-16.