TI-2009-03694 CVE-2009-3887 · GHSA-rcqr-q789-7p6p
ytnef has directory traversal
Priority MEDIUM 47
ytnef has directory traversal
Ytnef Project
Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
Ytnef Project records in CISA KEVNo Ytnef Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
26 records
TI-2017-06521 CVE-2017-9058 · GHSA-4g85-cv2v-x664
In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to…
Priority MEDIUM 45
In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.
TI-2017-06597 CVE-2017-9146 · GHSA-798c-jx77-ccgp
The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not…
Priority MEDIUM 43
The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service (heap-based…
TI-2021-02371 CVE-2021-3404 · GHSA-5f69-j422-38p4
Memory corruption in ytnef
Priority LOW 38
In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
TI-2021-02370 CVE-2021-3403 · GHSA-4pxg-g29h-qqfc
Use after free in ytnef
Priority LOW 38
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
TI-2017-04138 CVE-2017-6306 · GHSA-cmr5-7cg8-qhqv
An issue was discovered in ytnef before 1.9.1.
Priority LOW 38
An issue was discovered in ytnef before 1.9.1.
TI-2017-04554 CVE-2017-6801 · GHSA-xg55-jq33-cf6c
An issue was discovered in ytnef before 1.9.2.
Priority LOW 37
An issue was discovered in ytnef before 1.9.2.
TI-2017-04137 CVE-2017-6305 · GHSA-23q6-mcrh-4x5m
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2017-04136 CVE-2017-6304 · GHSA-r955-vhw5-h736
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2017-04135 CVE-2017-6303 · GHSA-rpmf-89pw-8m38
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2017-04134 CVE-2017-6302 · GHSA-hh53-27jj-f5qh
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2017-04133 CVE-2017-6301 · GHSA-x489-pw5x-hpfm
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2017-04132 CVE-2017-6300 · GHSA-w65j-p63m-96vc
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2017-04130 CVE-2017-6298 · GHSA-85cf-r4vp-j6mv
An issue was discovered in ytnef before 1.9.1.
Priority LOW 37
An issue was discovered in ytnef before 1.9.1.
TI-2009-03545 CVE-2009-3721 · GHSA-2qr8-v7fq-qr4p
Path traversal in ytnef
Priority LOW 37
Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF.
TI-2017-04555 CVE-2017-6802 · GHSA-hm69-vmvv-v8qp
An issue was discovered in ytnef before 1.9.2.
Priority LOW 36
An issue was discovered in ytnef before 1.9.2.
TI-2017-04553 CVE-2017-6800 · GHSA-9v9m-hrxh-m74p
An issue was discovered in ytnef before 1.9.2.
Priority LOW 36
An issue was discovered in ytnef before 1.9.2.
TI-2017-08937 CVE-2017-12144 · GHSA-r7jw-x37r-vm35
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c…
Priority LOW 27
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
TI-2017-08935 CVE-2017-12142 · GHSA-wx58-mfwq-x7r3
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord…
Priority LOW 27
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
TI-2017-08934 CVE-2017-12141 · GHSA-4qjw-wvqg-mchf
In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function…
Priority LOW 27
In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
TI-2017-06882 CVE-2017-9474 · GHSA-7cgr-863x-4vff
In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to…
Priority LOW 27
In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
TI-2017-06881 CVE-2017-9473 · GHSA-f94h-w96q-8548
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause…
Priority LOW 27
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
TI-2017-06880 CVE-2017-9472 · GHSA-g3hf-3c6j-2wxf
In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a…
Priority LOW 27
In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
TI-2017-06879 CVE-2017-9471 · GHSA-mgvm-xh8j-rpqx
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a…
Priority LOW 27
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
TI-2017-06878 CVE-2017-9470 · GHSA-3647-wp34-wwxg
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a…
Priority LOW 27
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.