CVEs-PoC/2017/CVE-2017-12144.md

CVE-2017-12144

Description

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.

POC

Reference

• https://github.com/Yeraze/ytnef/issues/51
• https://somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html

Github

No PoCs found on GitHub currently.