QwikSec

Security Database

CVE

CWE

Training

CVE-2009-3721

Published: May 26, 2021

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially execute arbitrary code when decoding attachments.

Vendor	Product	Versions
n/a	ytnef	affected `ytnef 2.8`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=521662

x_refsource_MISC

http://www.ocert.org/advisories/ocert-2009-013.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.