Ytnef Ytnefproject Ytnef

Do you want an email whenever new security vulnerabilities are reported in Ytnefproject Ytnef?

By the Year

In 2024 there have been 0 vulnerabilities in Ytnefproject Ytnef . Ytnef did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 0 0.00
2022 0 0.00
2021 3 7.80
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Ytnef vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Ytnefproject Ytnef Security Vulnerabilities

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser

CVE-2009-3721 7.8 - High - May 26, 2021

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially execute arbitrary code when decoding attachments.

Directory traversal

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c

CVE-2021-3403 7.8 - High - March 04, 2021

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

Double-free

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c

CVE-2021-3404 7.8 - High - March 04, 2021

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.

Memory Corruption

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Ytnefproject Ytnef or by Ytnefproject? Click the Watch button to subscribe.

subscribe