CVE-2010-5109

CVE-2010-5109 is an off-by-one error in the DecompressRTF function (ytnef.c) of Yerase’s TNEF Stream Reader that allows remote attackers to crash the application by processing a crafted TNEF file, effectively a denial of service. Public disclosures and vendor advisories reference an embedded liby...

CVE-2010-5109

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service crash via a crafted TNEF file, which triggers a buffer overflow...

CVE-2010-5109: Undefined Security Weakness

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service crash via a crafted TNEF file, which triggers a buffer overflow...

Microsoft Exchange and Outlook TNEF Decoding Code Execution (CVE-2006-0002)

A buffer overflow vulnerability exists in the way Microsoft Exchange and Microsoft Outlook process TNEF encoded messages...

Fedora Update for libytnef FEDORA-2012-10250

Check for the Version of libytnef OpenVAS Vulnerability Test Fedora Update for libytnef FEDORA-2012-10250 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libytnef FEDORA-2012-10286

Check for the Version of libytnef OpenVAS Vulnerability Test Fedora Update for libytnef FEDORA-2012-10286 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: libytnef-1.5-8.fc17

TNEF Stream Parser Library, used by "ytnef" to decode TNEF winmail.dat streams generated by Microsoft Outlook...

[SECURITY] Fedora 16 Update: libytnef-1.5-8.fc16

TNEF Stream Parser Library, used by "ytnef" to decode TNEF winmail.dat streams generated by Microsoft Outlook...

Microsoft Outlook - 'ATTACH_BY_REF_RESOLVE' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)

This host is missing a critical security update according to Microsoft Bulletin MS10-064. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)

This host is missing a critical security update according to Microsoft Bulletin MS10-064. OpenVAS Vulnerability Test $Id: secpodms10-064.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Outlook TNEF Remote Code Execution Vulnerability 2315011 Authors: Antu Sanadi Copyright: Copyright c 2010...

Outlook ATTACH_BY_REF_RESOLVE File Execution

$Id: ms10045outlookrefresolve.rb 9925 2010-07-25 16:04:22Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Outlook ATTACH_BY_REF_ONLY File Execution

$Id: ms10045outlookrefonly.rb 9926 2010-07-25 17:31:04Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Outlook PR_ATTACH_METHOD file execution vulnerability

------------------------------------------------------------------------ Outlook PRATTACHMETHOD file execution vulnerability ------------------------------------------------------------------------ Yorick Koster, October 2009 -----------------------------------------------------------------------...

Microsoft Exchange and Outlook TNEF Decoding Integer Overflow (CVE-2006-0002)

A buffer overflow vulnerability exists in the way Microsoft Exchange and Microsoft Outlook process TNEF encoded messages. When the TNEF decoder used by these products processes a TNEF object record with a large size value, an integer overflow can occur. An attacker potentially can exploit this...

Outlook ATTACH_BY_REF_ONLY File Execution

It has been discovered that certain e-mail message cause Outlook to create Windows shortcut-like attachments or messages within Outlook. Through specially crafted TNEF streams with certain MAPI attachment properties, it is possible to set a path name to files to be executed. When a user double...

yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities

------------------------------------------------------------------------ yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities ------------------------------------------------------------------------ Yorick Koster, June 2009...

yTNEF/Evolution Directory Traversal / Buffer Overflow

------------------------------------------------------------------------ yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities ------------------------------------------------------------------------ Yorick Koster, June 2009...

Design/Logic Flaw

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service EdgeTransport.exe termination via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to...