CVE-2017-8911 Integer overflow in n/a
An integer underflow in the TNEF library allows attackers to trigger invalid writes, potentially leading to arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-8911?
CVE-2017-8911 is a critical vulnerability in n/a, published on 12 May 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.
Weakness: CWE-191
Which versions are affected by CVE-2017-8911?
It affects 1 product.
Linux distribution packages (1)
tnef openSUSE:Tumbleweed | All versions | 1.4.18-1.6 |
Products include Tnef Project Tnef.
How do I fix CVE-2017-8911?
Apply the vendor's patch.
Is CVE-2017-8911 being exploited?
There is no known exploitation of CVE-2017-8911 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2026-103679 Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction
- CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value
- CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
Sources
Also known as DEBIAN-CVE-2017-8911, DLA-962-1, DSA-3869-1, GHSA-575j-8r4j-2fmq, MGASA-2017-0209, UBUNTU-CVE-2017-8911 and 1 more.