CVE-2010-5109
published 2014-05-05CVE-2010-5109: Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
2.39%
82.1th percentile
Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| claws-mail | claws-mail | >= 0 < 3.11.1-2 | 3.11.1-2 |
| claws-mail | claws-mail | >= 0 < 3.11.1-2 | 3.11.1-2 |
| claws-mail | claws-mail | >= 0 < 3.11.1-2 | 3.11.1-2 |
| claws-mail | claws-mail | >= 0 < 3.11.1-2 | 3.11.1-2 |
| debian | claws-mail | < claws-mail 3.11.1-2 (bookworm) | claws-mail 3.11.1-2 (bookworm) |
| debian | libytnef | < claws-mail 3.11.1-2 (bookworm) | claws-mail 3.11.1-2 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gm6c-c76r-gr4j: Off-by-one error in the DecompressRTF function in ytnef
ghsa_unreviewed·2022-05-17
CVE-2010-5109 [MEDIUM] GHSA-gm6c-c76r-gr4j: Off-by-one error in the DecompressRTF function in ytnef
Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.
OSV
CVE-2010-5109: Off-by-one error in the DecompressRTF function in ytnef
osv·2014-05-05·CVSS 4.3
CVE-2010-5109 [MEDIUM] CVE-2010-5109: Off-by-one error in the DecompressRTF function in ytnef
Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.
Debian
CVE-2010-5109: claws-mail - Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Strea...
vendor_debian·2010·CVSS 4.3
CVE-2010-5109 [MEDIUM] CVE-2010-5109: claws-mail - Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Strea...
Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.
Scope: local
bookworm: resolved (fixed in 3.11.1-2)
bullseye: resolved (fixed in 3.11.1-2)
forky: resolved (fixed in 3.11.1-2)
sid: resolved (fixed in 3.11.1-2)
trixie: resolved (fixed in 3.11.1-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://sourceforge.net/p/ytnef/bugs/13/http://www.openwall.com/lists/oss-security/2013/04/11/1http://www.securityfocus.com/bid/54484https://bugzilla.redhat.com/show_bug.cgi?id=831322https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083804.htmlhttps://lists.fedoraproject.org/pipermail/package-announce/2012-July/083853.htmlhttp://sourceforge.net/p/ytnef/bugs/13/http://www.openwall.com/lists/oss-security/2013/04/11/1http://www.securityfocus.com/bid/54484https://bugzilla.redhat.com/show_bug.cgi?id=831322https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083804.htmlhttps://lists.fedoraproject.org/pipermail/package-announce/2012-July/083853.html
2014-05-05
Published