CVE-2018-20348

Published December 22nd, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

1.9

LOW

Affected

PROJECT

Description

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.

libyal/libpff

Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format

GitHub

356