Search for packages
| purl | pkg:deb/debian/libytnef@1.9.3-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4vcd-yfbf-2bew
Aliases: CVE-2021-3404 |
Multiple vulnerabilities have been discovered in ytnef, the worst of which could potentially lead to remote code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-4w5v-t22x-5khp
Aliases: CVE-2021-3403 |
Multiple vulnerabilities have been discovered in ytnef, the worst of which could potentially lead to remote code execution. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-21bd-whcr-ekgv | In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. |
CVE-2017-12141
|
| VCID-2zd4-eyeq-27dd | In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. |
CVE-2017-9471
|
| VCID-8esx-t2u5-e3hq | The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted tnef file. |
CVE-2017-9146
|
| VCID-efxj-4v6j-fbaa | In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. |
CVE-2017-9474
|
| VCID-nrgn-8ky2-pyec | In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file. |
CVE-2017-12142
|
| VCID-qkuz-r9a9-vqbx | In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. |
CVE-2017-9472
|
| VCID-sag4-mswc-hbg5 | In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file. |
CVE-2017-9473
|
| VCID-uar8-sxnf-efhs | In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. |
CVE-2017-12144
|
| VCID-ujwn-5uux-gygu | In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. |
CVE-2017-9470
|