EUVD-2017-15360

Malware in sbrugna...

ytnef denial of service vulnerability (CNVD-2017-09347)

ytnef is an application library for extracting data from winmail.dat files. A denial of service vulnerability exists in the 'MAPIPrint' function in the lib/ytnef.c file in ytnef version 1.9.2. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

UBUNTU-CVE-2017-9474

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

DEBIAN-CVE-2017-9470

In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

Code injection

In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...