Description
Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | claws-mail | 3.11.1-2 | — |
| Debian 14 | libytnef | 1.5-5 | — |
| Debian 13 | claws-mail | 3.11.1-2 | — |
| Debian 13 | libytnef | 1.5-5 | — |
| Debian 12 | claws-mail | 3.11.1-2 | — |
| Debian 12 | libytnef | 1.5-5 | — |
References
- http://sourceforge.net/p/ytnef/bugs/13/
- [oss-security] 20130410 CVE-2010-5109 libytnef buffer overflow mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=831322
- 54484 vdb-entry
- FEDORA-2012-10286 vendor-advisory
- FEDORA-2012-10250 vendor-advisory