CVE-2017-6800

概要

参考情報

• debian.org/security/2017/dsa-3846 · Third Party Advisory
• Yeraze/ytnef commit f98f5d4 · Patch
• Yeraze/ytnef · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ

ytnef のその他の脆弱性

• CVE-2021-3404高 7.8In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) d…
• CVE-2021-3403高 7.8In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code ex…
• CVE-2017-12144中 5.5In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service…
• CVE-2017-12142中 5.5In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denia…
• CVE-2017-12141中 5.5In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to caus…