CVE-2017-6307

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacker.

• CWE-787

• http://www.debian.org/security/2017/dsa-3798Third Party Advisory
• http://www.securityfocus.com/bid/96427Third Party Advisory, VDB Entry
• https://github.com/verdammelt/tnef/blob/master/ChangeLogPatch, Release Notes, Third Party Advisory
• https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335aIssue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201708-02Third Party Advisory
• https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3798Third Party Advisory
• http://www.securityfocus.com/bid/96427Third Party Advisory, VDB Entry
• https://github.com/verdammelt/tnef/blob/master/ChangeLogPatch, Release Notes, Third Party Advisory
• https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335aIssue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201708-02Third Party Advisory
• https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/Patch, Third Party Advisory

Published

Feb 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6301An issue was discovered in ytnef before 1.9.1. This is relat…
• CVE-2017-6302An issue was discovered in ytnef before 1.9.1. This is relat…
• CVE-2017-6303An issue was discovered in ytnef before 1.9.1. This is relat…
• CVE-2017-6304An issue was discovered in ytnef before 1.9.1. This is relat…
• CVE-2017-6305An issue was discovered in ytnef before 1.9.1. This is relat…
• CVE-2017-6306An issue was discovered in ytnef before 1.9.1. This is relat…
• CVE-2017-6308An issue was discovered in tnef before 1.4.13. Several Integ…
• CVE-2017-6309An issue was discovered in tnef before 1.4.13. Two type conf…
• CVE-2017-6310An issue was discovered in tnef before 1.4.13. Four type con…
• CVE-2017-6311gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-depend…7.5
• CVE-2017-6312Integer overflow in io-ico.c in gdk-pixbuf allows context-de…5.5
• CVE-2017-6313Integer underflow in the load_resources function in io-icns.…7.1