CVE-2017-6308

An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-02-24

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Debian Linux (Debian)
• Tnef (Tnef Project)

References

• http://www.debian.org/security/2017/dsa-3798
• http://www.securityfocus.com/bid/96427
• https://github.com/verdammelt/tnef/blob/master/ChangeLog
• https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176
• https://security.gentoo.org/glsa/201708-02
• https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/