CVE-2017-8401

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

CVE-2017-8401

Removed by vendor...

png2swf png_read _chunk function null pointer reference denial of service vulnerability

SWFTools is a set of software tools for SWF manipulation and creation of utility authoring.Png2swf is a freeware program that converts PNG format images into lively flash SWF format files. The pngread chunk function null pointer dereference in the swftools 0.9.2 and previous versions of the png2s...

swfdump swf_GetBits function t-data denial of service vulnerability

SWFTools is a set of SWF manipulation and creation of utility authoring software tools. swfdump displays the id, name and depth of objects defined in the SWF file. It can further decompose Actionscript, extract text, and display location information objects. In swftools 0.9.2 and previous version...

swfdump Debugging Code Denial of Service Vulnerability

SWFTools is a set of SWF manipulation and creation of utility authoring software tools. swfdump displays the id, name and depth of objects defined in the SWF file. It can also further decompose Actionscript, extract text, and display location information objects. A debugging code denial of servic...

swfstrings rfxswf.c file swf_GetU8 function debug code denial of service vulnerability

SWFTools is a collection of SWF manipulation and creation utility authoring software tools. swfstrings are text parsing tools. A debugging code denial of service vulnerability exists in swftools version 0.9.2 and swftools version 0.9.1. The vulnerability arises because the swfGetU8 function in th...

Font Variable Null Pointer Denial of Service Vulnerability in swfstrigns

SWFTools is a set of software tools for SWF manipulation and creation of utility authoring. swfstrings is a text parsing tool. In versions swftools-0.9.2, 0.9.1, 0.8.0, 0.8.1, 0.4.4, elements in the global static array fonts are set to 0x0 and fail to validate their read operation, resulting in a...

swftools.com XSS vulnerability

Open Bug Bounty ID: OBB-60348 Description| Value ---|--- Affected Website:| swftools.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

GLSA-201204-05 : SWFTools: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201204-05 SWFTools: User-assisted execution of arbitrary code Integer overflow errors in the 'getPNG' function in png.c and the 'jpegload' function in jpeg.c could cause a heap-based buffer overflow. Impact : A remote attacker cou...

Gentoo Security Advisory GLSA 201204-05 (SWFTools)

The remote host is missing updates announced in advisory GLSA 201204-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201204-05 (SWFTools)

The remote host is missing updates announced in advisory GLSA 201204-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SWFTools: User-assisted execution of arbitrary code

Background SWFTools is a collection of SWF manipulation and generation utilities written by Rainer Böhme and Matthias Kramm. Description Integer overflow errors in the "getPNG" function in png.c and the "jpegload" function in jpeg.c could cause a heap-based buffer overflow. Impact A remote attack...

SWFTools Version Detection

This script finds the installed SWFTools version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbswftoolsdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ SWFTools Version Detection Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...

SWFTools Multiple Integer Overflow Vulnerabilities

This host is installed with SWFTools and is prone to multiple integer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbswftoolsmultintoverflowvulnlin.nasl 6539 2017-07-05 12:02:14Z cfischer $ SWFTools Multiple Integer Overflow Vulnerabilities Authors: Madhuri D Copyright: Copyright C...

SWFTools Version Detection

This script finds the installed SWFTools version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SWFTools Multiple Integer Overflow Vulnerabilities

SWFTools is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1516

Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via 1 a crafted PNG file, related to the getPNG function in lib/png.c; or 2 a crafted JPEG file, related to the jpegload function in lib/jpeg.c...

Integer overflow

Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via 1 a crafted PNG file, related to the getPNG function in lib/png.c; or 2 a crafted JPEG file, related to the jpegload function in lib/jpeg.c...

CVE-2010-1516

Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via 1 a crafted PNG file, related to the getPNG function in lib/png.c; or 2 a crafted JPEG file, related to the jpegload function in lib/jpeg.c...

CVE-2010-1516

Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via 1 a crafted PNG file, related to the getPNG function in lib/png.c; or 2 a crafted JPEG file, related to the jpegload function in lib/jpeg.c...