Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-16794HistoryNov 12, 2017 - 5:29 a.m.
CVE-2017-16794
2017-11-1205:29:00
Debian Security Bug Tracker
security-tracker.debian.org
4
0.001 Low
EPSS
Percentile
32.4%
The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | swftools | <= 0.9.2+git20130725-4.1 | swftools_0.9.2+git20130725-4.1_all.deb |
Related
nvd
nvd
CVE-2017-16794
2017-11-12 05:29:00
cve
cve
CVE-2017-16794
2022-10-03 16:23:21
ubuntucve
ubuntucve
CVE-2017-16794
2017-11-12 00:00:00
cvelist
cvelist
CVE-2017-16794
2022-10-03 16:23:21
prion
prion
Heap overflow
2017-11-12 05:29:00