UBUNTU-CVE-2026-111146

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

Linux Distros Unpatched Vulnerability : CVE-2026-111146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RT...

DEBIAN-CVE-2026-111146

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

EUVD-2026-102273

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146 ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146 ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146 ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146

Versions of ytnef through 2.1.2 are vulnerable to a heap out-of-bounds read in the MAPIPrint() function. The root cause is located in lib/ytnef.c , where providing compressed RTF properties in a crafted winmail.dat file can result in a decompressed RTF that lacks a NUL terminator . This causes pr...

CVE-2026-111146

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

CVE-2026-111146: Out-of-bounds Read

ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read,...

Randall Hand Yerase’s TNEF Stream Reader buffer error vulnerability

Randall Hand Yerase’s TNEF Stream Reader 2.1.2 and earlier versions have a buffer error vulnerability. This vulnerability stems from the improper handling of compressed RTF attributes by the MAPIPrint function. After decompression, the RTF files lack the NUL terminator, leading to out-of-bounds...

EUVD-2017-15854

Malware in sbrugna...

Null pointer dereference

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-9470

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

UBUNTU-CVE-2017-9470

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-9470

In ytnef, versions affected include 1.9.2 (and related releases). The vulnerability is in the MAPIPrint function of lib/ytnef.c where processing a crafted winmail.dat can trigger a NULL pointer dereference, causing a denial of service and application crash. CVSS data indicates local/remote exposu...

CVE-2017-9470

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...