Skip to content
OpenAdvisories

Package · Debian

tnef

9 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

    A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-a…

  • Medium 5.4

    Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

    A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the application fails to properly validate input buffer boundaries before copying data in g…