4.3
CVE-2010-5109
- EPSS 2.39%
- Veröffentlicht 05.05.2014 17:06:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginOff-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version16
Fedoraproject ≫ Fedora Version17
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.39% | 0.818 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
http://sourceforge.net/p/ytnef/bugs/13/
http://www.openwall.com/lists/oss-security/2013/04/11/1
http://www.securityfocus.com/bid/54484
https://bugzilla.redhat.com/show_bug.cgi?id=831322
https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083804.html
https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083853.html