Summary
It was discovered that libytnef incorrectly handled malformed TNEF streams.
If a user were tricked into opening a specially crafted TNEF attachment, an
attacker could cause a denial of service or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libytnef | 1.5-6ubuntu0.1 |
Vulnerabilities 12
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / ca…
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in …
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in vers…
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integ…
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and …
-
Unscored —
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal usi…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during …
-
Unscored —
An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFP…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed …
References
-
report
https://ubuntu.com/security/CVE-2017-6298
-
report
https://ubuntu.com/security/CVE-2017-6299
-
report
https://ubuntu.com/security/CVE-2017-6300
-
report
https://ubuntu.com/security/CVE-2017-6301
-
report
https://ubuntu.com/security/CVE-2017-6302
-
report
https://ubuntu.com/security/CVE-2017-6303
-
report
https://ubuntu.com/security/CVE-2017-6304
-
report
https://ubuntu.com/security/CVE-2017-6305
-
report
https://ubuntu.com/security/CVE-2017-6306
-
report
https://ubuntu.com/security/CVE-2017-6800
-
report
https://ubuntu.com/security/CVE-2017-6801
-
report
https://ubuntu.com/security/CVE-2017-6802