CVE-2017-6298

概要

参考情報

• debian.org/security/2017/dsa-3846 · Third Party Advisory
• openwall.com/lists/oss-security/2017/02/15/4 · Mailing List
• securityfocus.com/bid/96423 · Third Party Advisory
• Yeraze/ytnef#27 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ
• x41-dsec.de/lab/advisories/x41-2017-002-ytnef · Patch

ytnef のその他の脆弱性

• CVE-2021-3404高 7.8In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) d…
• CVE-2021-3403高 7.8In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code ex…
• CVE-2017-12144中 5.5In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service…
• CVE-2017-12142中 5.5In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denia…
• CVE-2017-12141中 5.5In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to caus…