[SECURITY] Fedora 35 Update: autotrace-0.31.1-62.fc35

AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others...

CVE-2021-39587

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpABC located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39582

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...

CVE-2021-39564

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause code Execution...

CVE-2021-39563

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause Denial of Service...

PT-2021-22646

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue was discovered in swftools, where a heap-buffer-overflow exists in the swf DumpActions function located in swfaction.c. This allows an attacker to cause code execution. Recommendations:...

PT-2021-22658

Name of the Vulnerable Software and Affected Versions: swftools versions prior to 20200710 Description: An issue exists in the function swf DumpABC located in abc.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions prior to 20200710,...

PT-2021-22665

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function swf FontExtract DefineFontInfo located in swftext.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For...

PT-2021-22659

Name of the Vulnerable Software and Affected Versions: swftools versions prior to 20200710 Description: An issue exists in the function swf ReadABC located in abc.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions prior to...

PT-2021-22654

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function swf GetPlaceObject located in swfobject.c, which allows an attacker to cause code execution due to a heap-buffer-overflow. Recommendations: For versions through...

PT-2021-22645

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function swf DumpActions located in swfaction.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions through...

PT-2021-22663

Name of the Vulnerable Software and Affected Versions: swftools versions prior to 20200710 Description: An issue exists in the function swf GetShapeBoundingBox located in swfshape.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions...

swftools 缓冲区错误漏洞

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause code execution...

Swftools 代码问题漏洞

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Cross site scripting

In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...

CVE-2020-23370

In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...

CVE-2020-23370

YzmCMS 5.6 is affected. A stored XSS exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, enabling an attacker to upload a SWF file that can be injected with arbitrary web script or HTML. The root cause is a stored XSS in that parameter; impact is described as e...

[SECURITY] Fedora 34 Update: autotrace-0.31.1-60.fc34

AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others...

CVE-2020-23370: Improper Neutralization of Input During Web Page Generation

In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A stored cross-site scripting vulnerability exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter in YzmCMS version 5.6. The vulnerabilit...