PT-2024-19627 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A stack-buffer-underflow issue was discovered in swftools via the parseExpression function at swftools/src/swfc.c:2576. This issue can potentially lead to a denial of service. Recommendations: For swftools...

CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

CVE-2024-22955

swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576...

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

CVE-2024-22956

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838...

CVE-2024-22920

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...

PT-2024-19609 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-buffer-overflow was found in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling the swf5lex functi...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the swftools/src/swfc.c:2576 page that fails to correctly validate the length of the input data, and can be...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the src/swfc.c:2602 page that fails to properly validate the length of the input data, and can be exploited...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a confusion in the instructions responsible for freeing memory in the bufferWriteData method of the swftools/lib/action/compile.c pag...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the swf5lex method on the lex.swf5.c:1321 page that fails to correctly validate the length of the input data, and can be exploited by an...

CVE-2024-22911

SWFTools 0.9.2 has a stack-buffer-underflow in parseExpression (src/swfc.c:2602). The vulnerability is described as potentially enabling arbitrary code execution or denial of service. Public documents do not specify an official patched version. A workaround suggestion exists in PT-2024-19607 to d...

CVE-2024-22955

swftools 0.9.2 is affected by a stack-buffer-underflow in parseExpression (swftools/src/swfc.c:2576). The issue arises from insufficient input length validation and can enable arbitrary code execution or denial of service. CVSS v3.1 base score 7.8 (High, Local, User Interaction required). Remedia...

CVE-2024-22914

CVE-2024-22914 affects SWFTools 0.9.2; a heap-use-after-free in the input handling (lex.swf5.c:2620) can cause denial of service. Exploitation is described as local with user interaction required; no patch details are provided in the sources. A practical workaround mentioned in PT-2024-19610 is t...

CVE-2024-22919

Swftools 0.9.2 contains a global-buffer-overflow in parseExpression (swftools/src/swfc.c:2587). Affected component is the swftools suite; vulnerability can potentially allow arbitrary code execution or denial of service. The issue is documented across multiple sources (CNVD/CNNVD, NVD, other vend...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a mix-up in the instruction responsible for freeing memory in the input method of the lex.swf5.c:2620 page. An attacker could exploit...

PT-2024-19628 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A heap-use-after-free issue was discovered in swftools via the removeFromTo function at swftools/src/swfc.c:838. This issue can potentially lead to a denial of service. Recommendations: For swftools version...

SWFTools Security Vulnerabilities

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools version 0.9.2, which stems from a heap release use-after-free vulnerability in the removeFromTo method on the swftools/src/swfc.c:8...

CVE-2024-22957

CVE-2024-22957 affects swftools 0.9.2. The vulnerability is an Out-of-bounds Read in dict_do_lookup (swftools/lib/q.c:1190) caused by insufficient validation of user-supplied data. Impact per sources includes potential denial of service; exploitation status is not detailed in the provided docs. S...

CVE-2024-22912

SWFTools v0.9.2 is affected by CVE-2024-22912: a global-buffer-overflow in the countline function (swf5compiler.flex:327) can lead to code execution. This is documented across multiple sources (NVD/CVE listings and vendor advisories). The vulnerability stems from improper input length validation ...