In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ytnef | Ytnef_project | 1.9.2 (including) | 1.9.2 (including) |
| Libytnef | Ubuntu | artful | * |
| Libytnef | Ubuntu | bionic | * |
| Libytnef | Ubuntu | cosmic | * |
| Libytnef | Ubuntu | esm-apps/bionic | * |
| Libytnef | Ubuntu | esm-apps/xenial | * |
| Libytnef | Ubuntu | upstream | * |
| Libytnef | Ubuntu | xenial | * |
| Libytnef | Ubuntu | yakkety | * |
| Libytnef | Ubuntu | zesty | * |