Vulnerabilities (CVE)

Filtered by vendor Ytnef Project Subscribe
Filtered by product Ytnef
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-9472 1 Ytnef Project 1 Ytnef 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVE-2017-9473 2 Canonical, Ytnef Project 2 Ubuntu Linux, Ytnef 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
CVE-2017-9474 1 Ytnef Project 1 Ytnef 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVE-2017-6299 2 Debian, Ytnef Project 2 Debian Linux, Ytnef 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c."
CVE-2017-12144 1 Ytnef Project 1 Ytnef 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-9471 2 Canonical, Ytnef Project 2 Ubuntu Linux, Ytnef 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVE-2017-9470 1 Ytnef Project 1 Ytnef 2019-05-18 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVE-2017-12142 1 Ytnef Project 1 Ytnef 2019-05-18 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-12141 1 Ytnef Project 1 Ytnef 2019-05-18 4.3 MEDIUM 5.5 MEDIUM
In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.