CVE-2017-6308

概要

参考情報

• debian.org/security/2017/dsa-3798 · Third Party Advisory
• securityfocus.com/bid/96427 · Third Party Advisory
• verdammelt/tnef · Patch
• verdammelt/tnef commit c504468 · Issue Tracking
• security.gentoo.org/glsa/201708-02 · Third Party Advisory
• x41-dsec.de/lab/advisories/x41-2017-004-tnef · Patch

tnef のその他の脆弱性

• CVE-2026-103680中 6.5A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes…
• CVE-2026-103679中 6.5A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulatio…
• CVE-2026-103678高 8.1A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text…
• CVE-2019-18849中 5.5In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winma…
• CVE-2017-8911緊急 9.8An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, cont…