CVE-2017-6308
HighSummary
An issue was discovered in tnef before version 1.4.13 related to integer overflows that can lead to heap overflows in functions handling memory allocation.
Risk Assessment
Heap overflows can lead to unauthorized memory access, posing a risk of malicious code execution and potential system takeover.
Recommendation
It is recommended to update tnef to version 1.4.13 or later to mitigate these vulnerabilities.
Other vulnerabilities in tnef
See all- CVE-2017-6310High
An issue was discovered in tnef before 1.4.13 related to four type confusions in the file_add_mapi_attrs() function. This may lead to invalid read and write operations controlled by an attacker.
- CVE-2017-6309High
An issue was discovered in tnef before version 1.4.13 related to two type confusions in the parse_file() function. This may lead to invalid read and write operations controlled by an attacker.
- CVE-2017-6307High
An issue was discovered in tnef before version 1.4.13 related to two OOB Write operations in the mapi_attr_read() function. These may lead to invalid read and write operations controlled by an attacker.
- CVE-2017-8911Critical
An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.
Original NVD description (English source)
An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.