CVE-2017-12142: Medium severity Ytnef Project Ytnef vulnerability
Published Aug 2, 2017
·Updated
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
Affected Software
1 affected component
Ytnef Project Ytnef=1.9.2
Event History
Aug 2, 2017
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12142?
CVE-2017-12142 is classified as a denial of service vulnerability.
2
How do I fix CVE-2017-12142?
To fix CVE-2017-12142, upgrade to a version of ytnef that addresses this vulnerability.
3
What software is affected by CVE-2017-12142?
CVE-2017-12142 specifically affects ytnef version 1.9.2.
4
What type of vulnerability is CVE-2017-12142?
CVE-2017-12142 is an invalid memory read vulnerability.
5
Can CVE-2017-12142 be exploited remotely?
Yes, CVE-2017-12142 can be exploited remotely via crafted files.