Back to CVE Browser

CVE-2017-9058

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1460%

EPSS Percentile23.63th

PublishedMay 18, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.

Affected Platforms (CPE)

📦

Ytnef Project

Ytnef

<= 1.9.2

💻

Canonical

Ubuntu Linux

= 14.04

References & Advisories

🔗 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/

🔗 https://usn.ubuntu.com/3667-1/

🔗 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/

🔗 https://usn.ubuntu.com/3667-1/

Related Vulnerabilities

CVE-2009-38879.8

ytnef has directory traversal

CVE-2017-91468.8

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain...

CVE-2009-37217.8

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is ...

CVE-2021-34047.8

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code ex...