33 matches found
EUVD-2017-2735
Malware in sbrugna...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
PT-2024-12649
Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in the png read chunk function in lib/png.c. Recommendations For SWFTool...
Heap overflow
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngload at /lib/png.c...
CVE-2022-35080: Out-of-bounds Write
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngload at /lib/png.c...
CVE-2022-35080
SWFTools contains a heap-buffer overflow in the png_load function of /lib/png.c for commit 772e55a2 (CVE-2022-35080). Affected component is SWFTools; root cause is a heap-buffer overflow in png_load. CVSS indicates Local attack vector, no privileges required, user interaction required, with Avail...
CVE-2022-35080
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngload at /lib/png.c...
CVE-2022-35080
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngload at /lib/png.c...
Amazon Linux 2 : mercurial (ALAS-2019-1328)
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified...
Denial Of Service (DoS)
advancecomp is vulnerable to denial of service DoS. The vulnerability exists in function advpngunfilter8 in lib/png.c...
CVE-2019-8383
An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other...
CVE-2019-8383: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other...
CVE-2017-16794
SWFTools 0.9.2 is affected by CVE-2017-16794 due to improper validation in png_load (lib/png.c). The code fails to correctly validate the multiplication of width and bits-per-pixel values, enabling a crafted file to cause a heap-based buffer over-read and application crash. The root cause is desc...
CVE-2017-16797: Integer Overflow or Wraparound
In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...
CVE-2017-16796: Improper Restriction of Operations within the Bounds of a Memory Buffer
In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...
PT-2017-14567
Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises from the png load function in lib/png.c, which fails to properly validate the multiplication of width and height values. This can lead to an integer overflow and a heap-based buffer overflow,...
PT-2017-14566
Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue is related to the png load function in lib/png.c, which does not check the return value of a realloc call. This allows remote attackers to cause a denial of service, resulting in an invalid write an...