PT-2021-8310

CVE-2009-3721

·

Published

2021-05-26

·

Updated

2021-06-04

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions yTNEF (affected versions not specified) Evolution (affected versions not specified)
Description Multiple directory traversal and buffer overflow issues were found in yTNEF and Evolution's TNEF parser, which is derived from yTNEF. A specially crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially execute arbitrary code when decoding attachments.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2009-3721
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com