EUVD-2017-15370

Malware in sbrugna...

CVE-2017-6309

CVE-2017-6309 affects the tnef package (before 1.4.13). The issue is one of several defects described in Mageia and other advisories: two type confusions in parse_file() may lead to invalid read/write operations under attacker-controlled input. This is part of a cluster of memory/safety issues in...