CVE-2017-6309

Description

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.443

Associated Vulnerability

Vulnerability	OS Platform
tnef security update(DSA-3798-1) tnef_1.4.9-1+deb8u1_i386.deb	Linux
tnef security update(DSA-3798-1) tnef_1.4.9-1+deb8u1_amd64.deb	Linux
tnef security update(DSA-3798-1) tnef_1.4.9-1+deb8u1_kfreebsd-i386.deb	Linux
tnef security update(DSA-3798-1) tnef_1.4.9-1+deb8u1_kfreebsd-amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234