Debian Libytnef vulnerabilities

CVE-2017-9474 [MEDIUM] CVE-2017-9474: libytnef - In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attacker... In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 1.9.3-1) bullseye: resolved (fixed in 1.9.3-1) forky: resolved (fixed in 1.9.3-1) sid: resolved (fixed in 1.9.3-1) trixie: resolved (fixed in

CVE-2017-9470 [MEDIUM] CVE-2017-9470: libytnef - In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to... In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 1.9.3-1) bullseye: resolved (fixed in 1.9.3-1) forky: resolved (fixed in 1.9.3-1) sid: resolved (fixed in 1.9.3-1) trixie: resolved (fixed in 1.9.3-1

CVE-2017-9472 [MEDIUM] CVE-2017-9472: libytnef - In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to... In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 1.9.3-1) bullseye: resolved (fixed in 1.9.3-1) forky: resolved (fixed in 1.9.3-1) sid: resolved (fixed in 1.9.3-1) trixie: resolved (fixed in 1.9.

CVE-2017-12144 [MEDIUM] CVE-2017-12144: libytnef - In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ... In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 1.9.3-1) bullseye: resolved (fixed in 1.9.3-1) forky: resolved (fixed in 1.9.3-1) sid: resolved (fixed in 1.9.3-1) trixie: resolved (fixed in 1.9.3-1)

CVE-2017-12142 [MEDIUM] CVE-2017-12142: libytnef - In ytnef 1.9.2, an invalid memory read vulnerability was found in the function S... In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 1.9.3-1) bullseye: resolved (fixed in 1.9.3-1) forky: resolved (fixed in 1.9.3-1) sid: resolved (fixed in 1.9.3-1) trixie: resolved (fixed in 1.9.3-1)