Lucene search
HistoryJan 19, 2024 - 6:15 p.m.
CVE-2024-22915
swftools
heap-use-after-free
code execution
attacker
vulnerability
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.2%
A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution.
Affected configurations
Node
swftoolsswftoolsMatch0.9.2
Related
prion
prion
Heap overflow
2024-01-19 18:15:00
cvelist
cvelist
CVE-2024-22915
2024-01-19 00:00:00
cve
cve
CVE-2024-22915
2024-01-19 18:15:08
ubuntucve
ubuntucve
CVE-2024-22915
2024-01-19 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.2%
Related for NVD:CVE-2024-22915