CVE-2017-6304

Related Files

Ubuntu Security Notice USN-3288-1

Posted May 16, 2017

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3288-1 - It was discovered that libytnef incorrectly handled malformed TNEF streams. If a user were tricked into opening a specially crafted TNEF attachment, an attacker could cause a denial of service or possibly execute arbitrary code.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2017-6298, CVE-2017-6299, CVE-2017-6300, CVE-2017-6301, CVE-2017-6302, CVE-2017-6303, CVE-2017-6304, CVE-2017-6305, CVE-2017-6306, CVE-2017-6800, CVE-2017-6801, CVE-2017-6802

SHA-256 | 0bd4647cbf3608a8faab43b87222895eed8cee87221307f7e8b473c98e823c9f

Download | Favorite | View

Debian Security Advisory 3846-1

Posted May 9, 2017

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3846-1 - Several issues were discovered in libytnef, a library used to decode application/ms-tnef e-mail attachments. Multiple heap overflows, out-of-bound writes and reads, NULL pointer dereferences and infinite loops could be exploited by tricking a user into opening a maliciously crafted winmail.dat file.

tags | advisory, overflow

systems | linux, debian

advisories | CVE-2017-6298, CVE-2017-6299, CVE-2017-6300, CVE-2017-6301, CVE-2017-6302, CVE-2017-6303, CVE-2017-6304, CVE-2017-6305, CVE-2017-6306, CVE-2017-6800, CVE-2017-6801, CVE-2017-6802

SHA-256 | 577b9b3ad2543c0f2b7f98bfb730def0edccd26ed743626f08539aa256ff2d93

Download | Favorite | View