391 matches found
CVE-2017-16793
The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
CVE-2017-16793
The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
Heap overflow
The pngload function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an erroneous...
CVE-2017-16793
The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
CVE-2017-16794
Removed by vendor...
SWFTools Denial of Service Vulnerability (CNVD-2017-36375)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability in the lib/modules/swfbits.c file 'swfDefineLosslessBitsTagToImage' function in SWFTools version 0.9.2 stems from the program failing to properly handle decompression failures. A remote attacker...
CVE-2017-16711
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
Libmp3splt Denial of Service Vulnerability
Libmp3splt is a library for creating mp3splt programs. A security vulnerability exists in the plugins/ogg.c file in Libmp3splt version 0.9.2. A remote attacker can exploit this vulnerability with a specially crafted file to cause a denial of service application crash...
Code injection
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2017-15185
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...
DEBIAN-CVE-2017-15185
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2017-15185
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...
SWFTools Denial of Service Vulnerability (CNVD-2017-15106)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfDeleteFilter' function in the lib/modules/swffilter.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointe...
SWFTools Denial of Service Vulnerability (CNVD-2017-15102)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...
SWFTools Denial of Service Vulnerability (CNVD-2017-15101)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'dictlookup' function in the lib/q.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
SWFTools Denial of Service Vulnerability (CNVD-2017-15103)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...
CVE-2017-11101
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfRelocate function in lib/modules/swftools.c...
CVE-2017-11100
When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...