CVE-2017-6309
HighSummary
An issue was discovered in tnef before version 1.4.13 related to two type confusions in the parse_file() function. This may lead to invalid read and write operations controlled by an attacker.
Risk Assessment
An attacker could exploit this vulnerability to perform unauthorized operations on data, potentially leading to loss of confidentiality or integrity of information.
Recommendation
It is recommended to update tnef to version 1.4.13 or later to mitigate this vulnerability.
Other vulnerabilities in tnef
See all- CVE-2017-6310High
An issue was discovered in tnef before 1.4.13 related to four type confusions in the file_add_mapi_attrs() function. This may lead to invalid read and write operations controlled by an attacker.
- CVE-2017-6308High
An issue was discovered in tnef before version 1.4.13 related to integer overflows that can lead to heap overflows in functions handling memory allocation.
- CVE-2017-6307High
An issue was discovered in tnef before version 1.4.13 related to two OOB Write operations in the mapi_attr_read() function. These may lead to invalid read and write operations controlled by an attacker.
- CVE-2017-8911Critical
An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.
Original NVD description (English source)
An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker.