In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat app...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 tnef

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.18-1"}]}]

Debian:13 tnef

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.18-1"}]}]

Debian:14 tnef

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.18-1"}]}]

参照URL

advisory security-tracker.debian.org