Roundcube TNEF Decoder DoS Vulnerability Fix

Vulnerability Overview Vulnerability Name: Fix for DoS vulnerability in TNEF (winmail.dat) files through carefully crafted compressed RTF sizes Vulnerability Type: Denial of Service (DoS) Affected Version: 1.6.17 Scope of Impact Affected Files: - - Remediation Remediation Details: - In the file, a length limit was applied to the variable to prevent Denial of Service attacks caused by excessively large values. - Specific modifications are as follows: ```php $preload = "{\rtf1\ansi\mac\deff0\deflang1033{\fonttbl{\f0\fswiss Arial;}{\f1\fswiss \f2\fnil \f3\fnil \f4\fswiss \f5\fswiss \f6\fswiss \f7\fswiss \f8\fswiss \f9\fswiss \f10\fswiss \f11\fswiss \f12\fswiss \f13\fswiss \f14\fswiss \f15\fswiss \f16\fswiss \f17\fswiss \f18\fswiss \f19\fswiss \f20\fswiss \f21\fswiss \f22\fswiss \f23\fswiss \f24\fswiss \f25\fswiss \f26\fswiss \f27\fswiss \f28\fswiss \f29\fswiss \f30\fswiss \f31\fswiss \f32\fswiss \f33\fswiss \f34\fswiss \f35\fswiss \f36\fswiss \f37\fswiss \f38\fswiss \f39\fswiss \f40\fswiss \f41\fswiss \f42\fswiss \f43\fswiss \f44\fswiss \f45\fswiss \f46\fswiss \f47\fswiss \f48\fswiss \f49\fswiss \f50\fswiss \f51\fswiss \f52\fswiss \f53\fswiss \f54\fswiss \f55\fswiss \f56\fswiss \f57\fswiss \f58\fswiss \f59\fswiss \f60\fswiss \f61\fswiss \f62\fswiss \f63\fswiss \f64\fswiss \f65\fswiss \f66\fswiss \f67\fswiss \f68\fswiss \f69\fswiss \f70\fswiss \f71\fswiss \f72\fswiss \f73\fswiss \f74\fswiss \f75\fswiss \f76\fswiss \f77\fswiss \f78\fswiss \f79\fswiss \f80\fswiss \f81\fswiss \f82\fswiss \f83\fswiss \f84\fswiss \f85\fswiss \f86\fswiss \f87\fswiss \f88\fswiss \f89\fswiss \f90\fswiss \f91\fswiss \f92\fswiss \f93\fswiss \f94\fswiss \f95\fswiss \f96\fswiss \f97\fswiss \f98\fswiss \f99\fswiss \f100\fswiss \f101\fswiss \f102\fswiss \f103\fswiss \f104\fswiss \f105\fswiss \f106\fswiss \f107\fswiss \f108\fswiss \f109\fswiss \f110\fswiss \f111\fswiss \f112\fswiss \f113\fswiss \f114\fswiss \f115\fswiss \f116\fswiss \f117\fswiss \f118\fswiss \f119\fswiss \f120\fswiss \f121\fswiss \f122\fswiss \f123\fswiss \f124\fswiss \f125\fswiss \f126\fswiss \f127\fswiss \f128\fswiss \f129\fswiss \f130\fswiss \f131\fswiss \f132\fswiss \f133\fswiss \f134\fswiss \f135\fswiss \f136\fswiss \f137\fswiss \f138\fswiss \f139\fswiss \f140\fswiss \f141\fswiss \f142\fswiss \f143\fswiss \f144\fswiss \f145\fswiss \f146\fswiss \f147\fswiss \f148\fswiss \f149\fswiss \f150\fswiss \f151\fswiss \f152\fswiss \f153\fswiss \f154\fswiss \f155\fswiss \f156\fswiss \f157\fswiss \f158\fswiss \f159\fswiss \f160\fswiss \f161\fswiss \f162\fswiss \f163\fswiss \f164\fswiss \f165\fswiss \f166\fswiss \f167\fswiss \f168\fswiss \f169\fswiss \f170\fswiss \f171\fswiss \f172\fswiss \f173\fswiss \f174\fswiss \f175\fswiss \f176\fswiss \f177\fswiss \f178\fswiss \f179\fswiss \f180\fswiss \f181\fswiss \f182\fswiss \f183\fswiss \f184\fswiss \f185\fswiss \f186\fswiss \f187\fswiss \f188\fswiss \f189\fswiss \f190\fswiss \f191\fswiss \f192\fswiss \f193\fswiss \f194\fswiss \f195\fswiss \f196\fswiss \f197\fswiss \f198\fswiss \f199\fswiss \f200\fswiss \f201\fswiss \f202\fswiss \f203\fswiss \f204\fswiss \f205\fswiss \f206\fswiss \f207\fswiss \f208\fswiss \f209\fswiss \f210\fswiss \f211\fswiss \f212\fswiss \f213\fswiss \f214\fswiss \f215\fswiss \f216\fswiss \f217\fswiss \f218\fswiss \f219\fswiss \f220\fswiss \f221\fswiss \f222\fswiss \f223\fswiss \f224\fswiss \f225\fswiss \f226\fswiss \f227\fswiss \f228\fswiss \f229\fswiss \f230\fswiss \f231\fswiss \f232\fswiss \f233\fswiss \f234\fswiss \f235\fswiss \f236\fswiss \f237\fswiss \f238\fswiss \f239\fswiss \f240\fswiss \f241\fswiss \f242\fswiss \f243\fswiss \f244\fswiss \f245\fswiss \f246\fswiss \f247\fswiss \f248\fswiss \f249\fswiss \f250\fswiss \f251\fswiss \f252\fswiss \f253\fswiss \f254\fswiss \f255\fswiss \f256\fswiss \f257\fswiss \f258\fswiss \f259\fswiss \f260\fswiss \f261\fswiss \f262\fswiss \f263\fswiss \f264\fswiss \f265\fswiss \f266\fswiss \f267\fswiss \f268\fswiss \f269\fswiss \f270\fswiss \f271\fswiss \f272\fswiss \f273\fswiss \f274\fswiss \f275\fswiss \f276\fswiss \f277\fswiss \f278\fswiss \f279\fswiss \f280\fswiss \f281\fswiss \f282\fswiss \f283\fswiss \f284\fswiss \f285\fswiss \f286\fswiss \f287\fswiss \f288\fswiss \f289\fswiss \f290\fswiss \f291\fswiss \f292\fswiss \f293\fswiss \f294\fswiss \f295\fswiss \f296\fswiss \f297\fswiss \f298\fswiss \f299\fswiss \f300\fswiss \f301\fswiss \f302\fswiss \f303\fswiss \f304\fswiss \f305\fswiss \f306\fswiss \f307\fswiss \f308\fswiss \f309\fswiss \f310\fswiss \f311\fswiss \f312\fswiss \f313\fswiss \f314\fswiss \f315\fswiss \f316\fswiss \f317\fswiss \f318\fswiss \f319\fswiss \f320\fswiss \f321\fswiss \f322\fswiss \f323\fswiss \f324\fswiss \f325\fswiss \f326\fswiss \f327\fswiss \f328\fswiss \f329\fswiss \f330\fswiss \f331\fswiss \f332\fswiss \f333\fswiss \f334\fswiss \f335\fswiss \f336\fswiss \f337\fswiss \f338\fswiss \f339\fswiss \f340\fswiss \f341\fswiss \f342\fswiss \f343\fswiss \f344\fswiss \f345\fswiss \f346\fswiss \f347\fswiss \f348\fswiss \f349\fswiss \f350\fswiss \f351\fswiss \f352\fswiss \

Goal Reached Thanks to every supporter — we hit 100%!

Roundcube TNEF Decoder DoS Vulnerability Fix

More from this source