Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2017-6308

An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.

VectorLOCAL

PublishedFeb 24, 2017, 04:59

Published Bycve@mitre.org

Base Score

Score7.8

Affected Versions

No affected versions found.

References

http://www.debian.org/security/2017/dsa-3798
http://www.securityfocus.com/bid/96427
https://github.com/verdammelt/tnef/blob/master/ChangeLog
https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176
https://security.gentoo.org/glsa/201708-02
https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/

Weakness Type

CWE-190

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.0

Attack Vector (AV)

LOCAL