high7.8
CVE-2021-3404
In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer…
Impact
In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ytnef Project | Ytnef | Version 1.9.3 |
| Redhat | Enterprise Linux | Version 7.0 |
| Fedoraproject | Fedora | Version 33 |