CVE Catalog

CVE-2017-8911

Critical
Published: Translated: NVD NIST

Summary

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious code or manipulate data, posing a threat to system integrity.

Recommendation

It is recommended to update tnef to the latest version to mitigate this vulnerability and to monitor systems for unauthorized operations.

Original NVD description (English source)

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS