An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef.
[ { "deprecated": false, "signature_type": "Function", "source": "https://github.com/yeraze/ytnef/commit/3cb0f914d6427073f262e1b2b5fd973e3043cdf7", "digest": { "function_hash": "201872607770062813721620458727459820164", "length": 3092.0 }, "signature_version": "v1", "target": { "function": "TNEFParse", "file": "lib/ytnef.c" }, "id": "CVE-2017-6801-806d4717" }, { "deprecated": false, "signature_type": "Line", "source": "https://github.com/yeraze/ytnef/commit/3cb0f914d6427073f262e1b2b5fd973e3043cdf7", "digest": { "threshold": 0.9, "line_hashes": [ "201801197655269967047314277472203802783", "45704563466453761791041832360644227449", "301571924839525125956928491205411681977", "314816730171763693088499983046382930809" ] }, "signature_version": "v1", "target": { "file": "lib/ytnef.c" }, "id": "CVE-2017-6801-da84a6b1" } ]