high7.8
CVE-2021-3403
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a d…
Impact
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ytnef Project | Ytnef | Version 1.9.3 |
| Redhat | Enterprise Linux | Version 7.0 |
| Fedoraproject | Fedora | Version 33 |