Launchpad.net

CVE 2009-3887

ytnef has directory traversal

See the CVE page on Mitre.org for more details.