Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/16 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-62642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening...

6.5CVSS5.3AI score0.00281EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/14 4:17 p.m.5 views

DEBIAN-CVE-2026-62642

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment...

6.5CVSS6.1AI score0.00281EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/14 4:17 p.m.6 views

CVE-2026-62642

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment...

6.5CVSS0.00281EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/14 4:17 p.m.8 views

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

6.5CVSS0.00256EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/07/14 3:49 p.m.4 views

CVE-2026-62642

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment...

6.5CVSS5.3AI score0.00281EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 3:49 p.m.4 views

CVE-2026-62642

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment...

4.3CVSS6.1AI score0.00281EPSS
SaveExploits0References9
CVE
CVE
added 2026/07/14 3:49 p.m.9 views

CVE-2026-62642

The data identifies Roundcube Webmail as affected. Vulnerable component: the TNEF decoder, with an infinite loop leading to denial of service when opening emails containing TNEF attachments. Affected versions are Roundcube Webmail before 1.6.17 and before 1.7.2 (1.7.x). Remediation: upgrade to Ro...

6.5CVSS6.1AI score0.00281EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2026/07/14 3:46 p.m.4 views

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

6.5CVSS5.3AI score0.00256EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 3:46 p.m.3 views

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

4.3CVSS6.1AI score0.00256EPSS
SaveExploits0References7
exploitpack
exploitpack
added 2016/06/29 12:0 a.m.10 views

Symantec AntiVirus - TNEF Decoder Integer Overflow

Symantec AntiVirus - TNEF Decoder Integer Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=819 Simple fuzzing found an integer overflow in the dec2tnef library. This allocation from Attachment::setDataFromAttachment doesn't verify that the attacker controlled value doesn...

1AI score
SaveExploits0
0day.today
0day.today
added 2016/06/29 12:0 a.m.43 views

Symantec AntiVirus - Integer Overflow in TNEF Decoder

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=819 Simple fuzzing found an integer overflow in the dec2tnef library. This allocation from Attachment::setDataFromAttachment doesn't verify that the attacker controlled value...

10CVSS9.2AI score0.24614EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2016/06/29 12:0 a.m.30 views

Symantec AntiVirus - TNEF Decoder Integer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=819 Simple fuzzing found an integer overflow in the dec2tnef library. This allocation from Attachment::setDataFromAttachment doesn't verify that the attacker controlled value doesn't wrap: .text:000227B8 8D 42 01 lea eax, edx+1...

10CVSS8.3AI score0.24614EPSS
SaveExploits2
Rows per page
Query Builder