1690 matches found
CVE-2024-22913
SWFTools v0.9.2 is affected by a heap-buffer-overflow in the function swf5lex (lex.swf5.c:1321) that can lead to code execution. Multiple sources corroborate the flaw in SWFTools 0.9.2; attack vector is not described in detail in these documents, and no vendor patch is clearly documented within t...
CVE-2024-22915
SWFTools 0.9.2 is affected by a heap-use-after-free in the function swf_DeleteTag (rfxswf.c:1193) that can lead to arbitrary code execution. The vulnerability is confirmed across multiple sources, with attackers able to trigger code execution locally. There is no patch/version fix detail in the p...
CVE-2024-22913
A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution...
CVE-2024-22915
A heap-use-after-free was found in SWFTools v0.9.2, in the function swfDeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution...
CVE-2024-22919
swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...
CVE-2024-22920
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...
PT-2024-19487 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a Stack Buffer Underflow in the dict foreach keyvalue function located at swftools/lib/q.c. This can potentially lead to a denial of service. Recommendations: For swftools version...
PT-2024-19614 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a heap-use-after-free in the bufferWriteData function located in swftools/lib/action/compile.c. This allows for unauthorized access. BrazenBamboo has been found to exploit this issue...
PT-2024-19627 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A stack-buffer-underflow issue was discovered in swftools via the parseExpression function at swftools/src/swfc.c:2576. This issue can potentially lead to a denial of service. Recommendations: For swftools...
CVE-2024-22914: Use After Free
A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service...
CVE-2024-22915: Use After Free
A heap-use-after-free was found in SWFTools v0.9.2, in the function swfDeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution...
CVE-2024-22957: Out-of-bounds Read
swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dictdolookup in swftools/lib/q.c:1190...
CVE-2024-22562
swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dictforeachkeyvalue at swftools/lib/q.c...
CVE-2024-22914
A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service...
CVE-2024-22915
A heap-use-after-free was found in SWFTools v0.9.2, in the function swfDeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution...
CVE-2024-22914
CVE-2024-22914 affects SWFTools 0.9.2; a heap-use-after-free in the input handling (lex.swf5.c:2620) can cause denial of service. Exploitation is described as local with user interaction required; no patch details are provided in the sources. A practical workaround mentioned in PT-2024-19610 is t...
PT-2024-19609 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-buffer-overflow was found in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling the swf5lex functi...
PT-2024-19611 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-use-after-free issue was found in the function swf DeleteTag at rfxswf.c:1193. This issue allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling t...
PT-2024-19628 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A heap-use-after-free issue was discovered in swftools via the removeFromTo function at swftools/src/swfc.c:838. This issue can potentially lead to a denial of service. Recommendations: For swftools version...