CVE:CVE-2017-6308
CNNVD:CNNVD-201702-848
tnef是一套用于解压缩MIME附件的程序。
tnef 1.4.13之前的版本中存在整数溢出漏洞。攻击者可利用该漏洞造成堆溢出。
solution:Upgrade tnef_project tnef to a higher version than 1.4.12,and avoid the version (,1.4.12]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0