CVE-2017-12144

2017-08-0205:29:00

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.3%

JSON

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

CPENameOperatorVersion
ytnefeq1.9.1-2
ytnefeq1.9.1
ytnefeq1.8
ytnefeq1.7
ytnefeq1.9.2
ytnefeq1.9

Name	Operator	Version
ytnef	eq	1.9.1-2
ytnef	eq	1.9.1
ytnef	eq	1.8
ytnef	eq	1.7
ytnef	eq	1.9.2
ytnef	eq	1.9

References

www.securityfocus.com/bid/100098

github.com/Yeraze/ytnef/issues/51

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/

somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html