The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef up to and including 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote malicious users to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted tnef file.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ytnef project ytnef |
Vulmon