Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5f69-j422-38p4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

EPSS

Процентиль: 80%
0.01939
Низкий

7.8 High

CVSS3

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

CVSS3: 7.8
nvd
больше 5 лет назад

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

CVSS3: 7.8
debian
больше 5 лет назад

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote att ...

CVSS3: 7.8
altlinux
почти 5 лет назад

ALT-PU-2021-3287: package `libytnef` update to version 2.0-alt1

CVSS3: 7.8
altlinux
около 5 лет назад

ALT-PU-2021-2841: package `libytnef` update to version 2.0-alt1

EPSS

Процентиль: 80%
0.01939
Низкий

7.8 High

CVSS3

Дефекты

CWE-119
CWE-787