Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ytnef project ytnef vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2017-9471
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Ytnef Project Ytnef 1.9.2
Canonical Ubuntu Linux 14.04
4.3
CVSSv2
CVE-2017-9473
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote malicious users to cause a denial of service (memory consumption) via a crafted file.
Ytnef Project Ytnef 1.9.2
Canonical Ubuntu Linux 14.04
5
CVSSv2
CVE-2017-6800
An issue exists in ytnef prior to 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to MAPIPrint() in libytnef.
Ytnef Project Ytnef
Debian Debian Linux 8.0
Debian Debian Linux 9.0
6.8
CVSSv2
CVE-2017-6304
An issue exists in ytnef prior to 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."
Ytnef Project Ytnef
Debian Debian Linux 8.0
Debian Debian Linux 9.0
6.8
CVSSv2
CVE-2021-3403
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote malicious users to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
Ytnef Project Ytnef 1.9.3
Redhat Enterprise Linux 7.0
Fedoraproject Fedora 33
6.8
CVSSv2
CVE-2021-3404
In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote malicious users to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
Ytnef Project Ytnef 1.9.3
Redhat Enterprise Linux 7.0
Fedoraproject Fedora 33
5
CVSSv2
CVE-2017-6801
An issue exists in ytnef prior to 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef.
Ytnef Project Ytnef
Debian Debian Linux 8.0
Debian Debian Linux 9.0
6.8
CVSSv2
CVE-2017-6298
An issue exists in ytnef prior to 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked."
Ytnef Project Ytnef
Debian Debian Linux 8.0
Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2017-6299
An issue exists in ytnef prior to 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c."
Ytnef Project Ytnef
Debian Debian Linux 8.0
Debian Debian Linux 9.0
6.8
CVSSv2
CVE-2017-6300
An issue exists in ytnef prior to 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in version field in lib/tnef-types.h."
Ytnef Project Ytnef
Debian Debian Linux 8.0
Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »