MGASA-2017-0209

Source
https://advisories.mageia.org/MGASA-2017-0209.html
Import Source
https://advisories.mageia.org/MGASA-2017-0209.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2017-0209
Related
Published
2017-07-22T08:42:57Z
Modified
2017-07-21T14:06:25Z
Summary
Updated tnef packages fix security vulnerability
Details

It was discovered that tnef did not correctly validate its input. An attacker could exploit this by tricking a user into opening a malicious attachment, which would result in a denial-of-service by application crash (CVE-2017-8911).

References
Credits

Affected packages

Mageia:5 / tnef

Package

Name
tnef
Purl
pkg:rpm/mageia/tnef?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.15-1.mga5

Ecosystem specific

{
    "section": "core"
}