Login Request a demo
YT
Product
Ytnef
by Ytnef Project · last CVE May 26, 2021
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 2High 15Medium 9Low 0
Severity
All severities26Critical2High15Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ytnef to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12144
5.5
1%
Aug 2
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file
Affected: 1.9.2
CVE-2017-12142
5.5
1%
Aug 2
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file
Affected: 1.9.2
CVE-2017-12141
5.5
1%
Aug 2
In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted…
Affected: 1.9.2
CVE-2017-9474
5.5
1%
Jun 7
In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted…
Affected: 1.9.2
CVE-2017-9473
5.5
1%
Jun 7
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file
Affected: 1.9.2
CVE-2017-9472
5.5
1%
Jun 7
In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file
Affected: 1.9.2
CVE-2017-9471
5.5
1%
Jun 7
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file
Affected: 1.9.2
CVE-2017-9470
5.5
1%
Jun 7
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file
Affected: 1.9.2
CVE-2017-6299
5.5
1%
Feb 24
An issue was discovered in ytnef before 1.9.1
Affected: through 1.9
Showing 9