CVE-2017-9146

HIGH

ytnef < 1.9.2 - Heap-Based Buffer Overflow via Crafted TNEF File

Title source: llm

Description

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted tnef file.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3667-1/

Third Party Advisory x_refsource_misc

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862707

Exploit, Third Party Advisory x_refsource_misc

https://github.com/Yeraze/ytnef/issues/47

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/

Scores

CVSS v3 8.8

EPSS 0.0239

EPSS Percentile 82.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (1)

ytnef_project/ytnef < 1.9.2

Published May 22, 2017

Tracked Since Feb 18, 2026