Tnef Project

9 CVEs across 1 Tnef Project products. Browse Tnef Project vulnerabilities, severities, and proof-of-concept exploits.

Tnef Project products with known CVEs

ProductCVEs
Tnef9
Tnef Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-103680Low3.12026-10-01A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate file…
CVE-2026-103679Medium6.52026-10-01A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) fil…
CVE-2026-103678Medium5.42026-10-01A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data…
CVE-2019-18849Medium5.52019-11-11In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/…
CVE-2017-8911Critical9.82017-05-12An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attack…
CVE-2017-6310High7.82017-02-24An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid rea…
CVE-2017-6309High7.82017-02-24An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and writ…
CVE-2017-6308High7.82017-02-24An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap mem…
CVE-2017-6307High7.82017-02-24An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and wr…