NVD

Id
82638  
Name
CVE-2017-6309  
Description
An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-03-18  
Published
2017-02-23  
Modified Date
2017-03-01  
Seq
2017-6309  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
407182 82638 CVE-2017-5838 [oss-security] 20170201 Multiple memory access issues in gstreamer  View
407183 82638 CVE-2017-5838 [oss-security] 20170202 Re: Multiple memory access issues in gstreamer  View
407184 82638 CVE-2017-5838 96001  View
407185 82638 CVE-2017-5838 https://bugzilla.gnome.org/show_bug.cgi?id=777263  View
407186 82638 CVE-2017-5838 https://gstreamer.freedesktop.org/releases/1.10/#1.10.3  View
407187 82638 CVE-2017-5838 [oss-security] 20170201 Multiple memory access issues in gstreamer  View
407188 82638 CVE-2017-5838 [oss-security] 20170202 Re: Multiple memory access issues in gstreamer  View
407189 82638 CVE-2017-5838 96001  View
407190 82638 CVE-2017-5838 https://bugzilla.gnome.org/show_bug.cgi?id=777263  View
407191 82638 CVE-2017-5838 https://gstreamer.freedesktop.org/releases/1.10/#1.10.3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65345 JVNDB-2017-001708 tnef の parse_file() 関数における不正な読み書き操作を引き起こされる脆弱性 tnef の parse_file() 関数には、不正な読み書き操作を引き起こされる脆弱性が存在します。 CVE-2017-6309 CVE-2017-6309 82638 6.8 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001708.html 2017-02-23 2017-03-14 View