CVE-2009-3721

Multiple directory traversal and buffer overflow vulnerabilities were
discovered in yTNEF, and in Evolution’s TNEF parser that is derived from
yTNEF. A crafted email could cause these applications to write data in
arbitrary locations on the filesystem, crash, or potentially execute
arbitrary code when decoding attachments.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567631&gt;