CVE-2017-1000186: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a stack overflow was found in pdf2swf...

SWFTools Memory Disclosure Vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A memory leak vulnerability exists in wav2swf in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-16868: NULL Pointer Dereference

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

SWFTools Address Access Exception Vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in swfdump swfGetBits in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-1000174: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000187: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

SWFTools Address Access Exception Vulnerability (CNVD-2017-37275)

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in SWFTools in pdf2swf. FoFiTrueType::writeTTF. An attacker could exploit this vulnerability to cause a denial of service...

SWFTools memcpy buffer overflow vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A memcpy buffer overflow vulnerability exists in swfc in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-1000185: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a memcpy buffer overflow was found in gif2swf...

SWFTools Denial of Service Vulnerability (CNVD-2017-36496)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2. A remote attacker can exploit this vulnerability to cause a denial of service integer overflow, heap buffer...

SWFTools Denial of Service Vulnerability (CNVD-2017-36497)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2, which stems from the program's failure to detect the return value of a realloc call. A remote attacker can exploit...

SWFTools Denial of Service Vulnerability (CNVD-2017-36499)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2, which stems from the program failing to properly validate WAV data. A remote attacker can exploit this...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

UBUNTU-CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

Code injection

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

Integer overflow

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

UBUNTU-CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...