CVE-2010-5109

no score yetEPSS 2.4%

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2014-05-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

fedoraproject:fedora
randall_hand:yerase\'s_tnef_stream_reader

References

http://sourceforge.net/p/ytnef/bugs/13/
http://www.openwall.com/lists/oss-security/2013/04/11/1
http://www.securityfocus.com/bid/54484
https://bugzilla.redhat.com/show_bug.cgi?id=831322
https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083804.html

Check your stack JSON