CVE-2016-10091 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Unrtf

Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function.