CyberRota Analysis
AI-GeneratedA vulnerability exists in the TNEF processing that allows remote attackers to craft malicious TNEF files containing multiple message bodies, leading to improper memory management. This can trigger use-after-free and double-free conditions, causing the affected application to crash and resulting in a Denial of Service (DoS). Organizations using software that processes TNEF files should prioritize patching this issue to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).
Related CVEs
Other vulnerabilities affecting the same vendor(s)