CVE-2009-3721

Katalog CVE

CVSS 7.8 · High EPSS 1,6%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada gnome evolution, ytnef project ytnef. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially execute arbitrary code when decoding attachments.

Rincian

Terbit di NVD

26 Mei 2021

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=521662 issue tracking · patch · advisory pihak ketiga
• http://www.ocert.org/advisories/ocert-2009-013.html advisory pihak ketiga