Tnef Project

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Tnef Project records in CISA KEV

No Tnef Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tnef 9 records MEDIUM

Records

9 records in Tnef · all components

TI-2017-06404 CVE-2017-8911 · GHSA-575j-8r4j-2fmq

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14.

MEDIUM 46

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01934 Published 2017-05-12 No fix listed CWE-191

TI-2017-04142 CVE-2017-6310 · GHSA-3pcq-f86j-jh8q

An issue was discovered in tnef before 1.4.13.

LOW 37

An issue was discovered in tnef before 1.4.13.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01411 Published 2017-02-24 No fix listed CWE-125

TI-2017-04141 CVE-2017-6309 · GHSA-69j8-qm33-j976

An issue was discovered in tnef before 1.4.13.

LOW 37

An issue was discovered in tnef before 1.4.13.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01411 Published 2017-02-24 No fix listed CWE-125

TI-2017-04140 CVE-2017-6308 · GHSA-pf7f-x7x4-c238

An issue was discovered in tnef before 1.4.13.

LOW 37

An issue was discovered in tnef before 1.4.13.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0154 Published 2017-02-24 No fix listed CWE-190

TI-2017-04139 CVE-2017-6307 · GHSA-p3gc-pjgj-g65j

An issue was discovered in tnef before 1.4.13.

LOW 37

An issue was discovered in tnef before 1.4.13.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01411 Published 2017-02-24 No fix listed CWE-787

TI-2026-65748 CVE-2026-103678 · GHSA-8r4j-263j-fh85

Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

LOW 35

A flaw was found in tnef.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00235 Published 2026-10-01 No fix listed CWE-125

TI-2026-65750 CVE-2026-103680 · GHSA-qr96-v34j-wcrq

Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

LOW 29

A flaw was found in tnef.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00322 Published 2026-10-01 No fix listed CWE-787

TI-2026-65749 CVE-2026-103679 · GHSA-hh3v-7rq2-8fq9

Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

LOW 29

A flaw was found in tnef.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00279 Published 2026-10-01 No fix listed CWE-416

TI-2019-13584 CVE-2019-18849 · GHSA-cq6j-h35c-x8gr

In tnef before 1.4.18, an attacker may be able to write to the victim's…

LOW 27

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01213 Published 2019-11-11 No fix listed CWE-125

Open these records in search →

Critical	1
High	5
Medium	3
Low	0
No CVSS	0