Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-6310

Опубликовано: 24 фев. 2017
Источник: debian
EPSS Низкий

Описание

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tneffixed1.4.12-1.1package

Примечания

  • https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/

  • Fixed by: https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d

  • regression fixed by: https://github.com/verdammelt/tnef/commit/9c4015433ecd3177976f820f7aa524c7e64c7c92

  • regression fixed by: https://github.com/verdammelt/tnef/commit/c0b99164d14dcc61348a2ddffd47dfe31d087bad

EPSS

Процентиль: 57%
0.00353
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 9 лет назад

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker.

CVSS3: 7.8
nvd
почти 9 лет назад

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker.

CVSS3: 7.8
github
больше 3 лет назад

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker.

EPSS

Процентиль: 57%
0.00353
Низкий