Search CVE reports


Toggle filters

1 – 10 of 33 results


CVE-2009-3721

Medium priority
Ignored

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary...

1 affected package

ytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
ytnef
Show less packages

CVE-2021-3404

Medium priority
Needs evaluation

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-3403

Medium priority
Needs evaluation

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2019-18849

Medium priority

Some fixes available 1 of 4

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

1 affected package

tnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
tnef Not affected Not affected Not affected Vulnerable Fixed
Show less packages

CVE-2009-3887

Medium priority
Ignored

ytnef has directory traversal

1 affected package

ytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
ytnef
Show less packages

CVE-2017-12144

Low priority
Vulnerable

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages

CVE-2017-12142

Low priority
Vulnerable

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages

CVE-2017-12141

Low priority

Some fixes available 1 of 6

In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages

CVE-2017-9474

Low priority
Vulnerable

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages

CVE-2017-9472

Low priority
Vulnerable

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

1 affected package

libytnef

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libytnef Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages