YT
Product
Ytnef
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 15Medium 9Low 0
Watch
Add Ytnef to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-3887 | 9.8 | Oct 29 | ytnef has directory traversal Affected: All versions, or not specified |
| CVE-2017-9058 | 9.8 | May 18 | In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c Affected: through 1.9.2 |
| CVE-2017-9146 | 8.8 | May 22 | The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers… Affected: through 1.9.2 |
| CVE-2009-3721 | 7.8 | May 26 | Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF Affected: All versions, or not specified |
| CVE-2021-3404 | 7.8 | Mar 4 | In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can… Affected: 1.9.3 |
| CVE-2021-3403 | 7.8 | Mar 4 | In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can… Affected: 1.9.3 |
| CVE-2017-6306 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6305 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6304 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6303 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6302 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6301 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6300 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6298 | 7.8 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
| CVE-2017-6802 | 7.5 | Mar 10 | An issue was discovered in ytnef before 1.9.2 Affected: through 1.9.1 |
| CVE-2017-6801 | 7.5 | Mar 10 | An issue was discovered in ytnef before 1.9.2 Affected: through 1.9.1 |
| CVE-2017-6800 | 7.5 | Mar 10 | An issue was discovered in ytnef before 1.9.2 Affected: through 1.9.1 |
| CVE-2017-12144 | 5.5 | Aug 2 | In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file Affected: 1.9.2 |
| CVE-2017-12142 | 5.5 | Aug 2 | In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file Affected: 1.9.2 |
| CVE-2017-12141 | 5.5 | Aug 2 | In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted… Affected: 1.9.2 |
| CVE-2017-9474 | 5.5 | Jun 7 | In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted… Affected: 1.9.2 |
| CVE-2017-9473 | 5.5 | Jun 7 | In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file Affected: 1.9.2 |
| CVE-2017-9472 | 5.5 | Jun 7 | In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file Affected: 1.9.2 |
| CVE-2017-9471 | 5.5 | Jun 7 | In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file Affected: 1.9.2 |
| CVE-2017-9470 | 5.5 | Jun 7 | In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file Affected: 1.9.2 |
| CVE-2017-6299 | 5.5 | Feb 24 | An issue was discovered in ytnef before 1.9.1 Affected: through 1.9 |
Showing 26