Vulnerabilities (CVE)

Filtered by vendor Tnef Project Subscribe
Filtered by product Tnef
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-18849 1 Tnef Project 1 Tnef 2021-08-23 4.3 MEDIUM 5.5 MEDIUM
In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.