An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattr_read(). These might lead to invalid read and write operations, controlled by an attacker.
{ "urgency": "not yet assigned" }