Back to CVE Browser

CVE-2009-3887

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0270%

EPSS Percentile14.06th

PublishedOct 29, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

ytnef has directory traversal

Affected Platforms (CPE)

📦

Ytnef Project

Ytnef

All versions

References & Advisories

🔗 http://ocert.org/advisories/ocert-2009-013.html

🔗 https://access.redhat.com/security/cve/cve-2009-3887

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3887

🔗 https://security-tracker.debian.org/tracker/CVE-2009-3887

🔗 https://www.akitasecurity.nl/advisory.php?id=AK20090601

🔗 http://ocert.org/advisories/ocert-2009-013.html

🔗 https://access.redhat.com/security/cve/cve-2009-3887

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3887

Related Vulnerabilities

CVE-2017-90589.8

In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK mac...

CVE-2017-91468.8

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain...

CVE-2009-37217.8

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is ...

CVE-2017-62987.8

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return...