CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-3403

HIGH
7.8
CVSS Severity Score
EPSS Score0.1480%
EPSS Percentile9.05th
Published2021年3月4日
Last Modified2024年11月21日

Vulnerability Description

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

Affected Platforms (CPE)

📦
Ytnef Project

Ytnef

= 1.9.3
💻
Redhat

Enterprise Linux

= 7.0
💻
Fedoraproject

Fedora

= 33

References & Advisories

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1926967
🔗 https://github.com/Yeraze/ytnef/issues/85
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1926967
🔗 https://github.com/Yeraze/ytnef/issues/85

関連する脆弱性情報

CVE-2017-90589.8

In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK mac...

CVE-2009-38879.8

ytnef has directory traversal

CVE-2017-91468.8

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain...

CVE-2021-34047.8

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code ex...