CVE 2017-9058

In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.

Related bugs and status

CVE-2017-9058 (Candidate) is related to these bugs:

Bug #1666884: libytnef: February 2017 multiple vulnerabilities (X41-2017-002)

		In	Importance	Status
1666884	libytnef: February 2017 multiple vulnerabilities (X41-2017-002)	libytnef (Ubuntu)	Medium	Fix Released
1666884	libytnef: February 2017 multiple vulnerabilities (X41-2017-002)	libytnef (Debian)	Unknown	Fix Released
1666884	libytnef: February 2017 multiple vulnerabilities (X41-2017-002)	libytnef (Ubuntu Xenial)	Medium	Incomplete
1666884	libytnef: February 2017 multiple vulnerabilities (X41-2017-002)	libytnef (Ubuntu Trusty)	Medium	Confirmed
1666884	libytnef: February 2017 multiple vulnerabilities (X41-2017-002)	libytnef (Ubuntu Zesty)	Medium	Won't Fix
1666884	libytnef: February 2017 multiple vulnerabilities (X41-2017-002)	libytnef (Ubuntu Yakkety)	Medium	Won't Fix

See the

CVE page on Mitre.org for more details.