CVE-2009-3887: Path Traversal
Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially execute arbitrary code when decoding attachments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3887?
CVE-2009-3887 is classified as a critical severity vulnerability due to its potential to execute arbitrary code.
How do I fix CVE-2009-3887?
To fix CVE-2009-3887, update to the latest version of the affected software, ytnef, that addresses these vulnerabilities.
What affects CVE-2009-3887?
CVE-2009-3887 affects the ytnef package and Evolution's TNEF parser derived from ytnef.
What kind of attacks can exploit CVE-2009-3887?
CVE-2009-3887 can be exploited through crafted emails that trigger directory traversal and buffer overflow conditions.
What are the potential consequences of CVE-2009-3887?
The potential consequences of CVE-2009-3887 include unauthorized data writing, application crashes, and execution of arbitrary code.