MGASA-2017-0174

Dashboard / Vulnerabilities / MGASA-2017-0174

MGASA-2017-0174

Summary: Updated libytnef packages fix security vulnerabilities

Details: Several issues were discovered in libytnef, a library used to decode application/ms-tnef e-mail attachments. Multiple heap overflows, out-of-bound writes and reads, NULL pointer dereferences and infinite loops could be exploited by tricking a user into opening a maliciously crafted winmail.dat file (CVE-2017-6298, CVE-2017-6299, CVE-2017-6300, CVE-2017-6301, CVE-2017-6302, CVE-2017-6303, CVE-2017-6304, CVE-2017-6305, CVE-2017-6306, CVE-2017-6800, CVE-2017-6801, CVE-2017-6802). A heap-buffer-overflow vulnerability in libytnef due to an incorrect boundary checking in SIZECHCK macro in lib/ytnef.c (CVE-2017-9058).

References: https://advisories.mageia.org/MGASA-2017-0174.html, https://bugs.mageia.org/show_bug.cgi?id=20893, http://openwall.com/lists/oss-security/2017/02/15/4, https://www.debian.org/security/2017/dsa-3846, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556