CVE-2017-9472

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

UBUNTU-CVE-2017-9472

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

Heap overflow

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9471

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9473

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-9472

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9474

CVE-2017-9474 affects ytnef 1.9.2: the DecompressRTF function in lib/ytnef.c can be used by a crafted file to cause a denial of service via a heap-based buffer over-read, crashing the application. The vulnerability is confirmed in public CVE records and CNVD/OSV-style entries cite the same issue....

CVE-2017-9470

In ytnef, versions affected include 1.9.2 (and related releases). The vulnerability is in the MAPIPrint function of lib/ytnef.c where processing a crafted winmail.dat can trigger a NULL pointer dereference, causing a denial of service and application crash. CVSS data indicates local/remote exposu...

CVE-2017-9470

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-9471

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9471

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

ytnef buffer overflow vulnerability (CNVD-2017-07744)

ytnef is an application library for extracting data from winmail.dat files. A buffer overflow vulnerability exists in the 'TNEFFillMapi' function in the lib/ytnef.c file of libytnef in ytnef 1.9.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

Unspecified Vulnerability in Jasypt

Jasypt is a Jasypt team developed a Java library with encryption features , it is based on standard cryptography , able to one-way or two-way encryption of passwords , text , numbers and binary files and so on. A security vulnerability exists in versions of Jasypt prior to 1.9.2. An attacker can...

ytnef heap buffer overflow vulnerability (CNVD-2017-07578)

ytnef is an application library for extracting data from winmail.dat files. A heap buffer overflow vulnerability exists in ytnef 1.9.2 and earlier versions of libytnef due to the program failing to properly validate bounds in the SIZECHECK macro in the lib/ytnef.c file. An attacker can exploit th...

DEBIAN-CVE-2014-9970

jasypt before 1.9.2 allows a timing attack against the password hash comparison...

CVE-2009-5147

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names...

DEBIAN-CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

Out-of-bounds

An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse in libytnef...

CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

About the security content of Transporter 1.9.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...