First published: Wed Aug 02 2017(Updated: )
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
ytnef | =1.9.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-12144 has a severity rating classified as a denial of service vulnerability.
CVE-2017-12144 allows attackers to cause a denial of service by exploiting an allocation failure in ytnef 1.9.2.
CVE-2017-12144 specifically affects ytnef version 1.9.2.
To fix CVE-2017-12144, you should upgrade to a version of ytnef later than 1.9.2 that addresses this vulnerability.
As of now, there are no publicly disclosed exploits for CVE-2017-12144, but the vulnerability poses a risk of denial of service.