Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30208
HistoryApr 29, 2021 - 10:27 a.m.

Denial Of Service (DoS)

2021-04-2910:27:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.002 Low

EPSS

Percentile

55.8%

ytnef is vulnerable to denial of service. The TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.