CVE-2017-9470

2017-06-0705:29:00

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

CPENameOperatorVersion
ytnefeq1.9.1-2
ytnefeq1.9.1
ytnefeq1.8
ytnefeq1.7
ytnefeq1.9.2
ytnefeq1.9

Name	Operator	Version
ytnef	eq	1.9.1-2
ytnef	eq	1.9.1
ytnef	eq	1.8
ytnef	eq	1.7
ytnef	eq	1.9.2
ytnef	eq	1.9

References

blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/