ytnef project ytnef vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially ...

Gnome Evolution Ytnef Project Ytnef

7.8

CVSSv3

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote malicious users to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

Ytnef Project Ytnef 1.9.3 Redhat Enterprise Linux 7.0 Fedoraproject Fedora 33

7.8

CVSSv3

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote malicious users to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

Ytnef Project Ytnef 1.9.3 Redhat Enterprise Linux 7.0 Fedoraproject Fedora 33

9.8

CVSSv3

ytnef has directory traversal

Ytnef Project Ytnef

5.5

CVSSv3

In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows malicious users to cause a denial of service via a crafted file.

Ytnef Project Ytnef 1.9.2

5.5

CVSSv3

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows malicious users to cause a denial of service via a crafted file.

Ytnef Project Ytnef 1.9.2

5.5

CVSSv3

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows malicious users to cause a denial of service via a crafted file.

Ytnef Project Ytnef 1.9.2

5.5

CVSSv3

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

Ytnef Project Ytnef 1.9.2

5.5

CVSSv3

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

Ytnef Project Ytnef 1.9.2 Canonical Ubuntu Linux 14.04

5.5

CVSSv3

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

Ytnef Project Ytnef 1.9.2

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook