1690 matches found
CVE-2021-39582
SWFTools (up to version 20200710) contains a heap-buffer-overflow in swf_GetPlaceObject() implemented in swfobject.c, allowing attackers to achieve code execution. The vulnerability is documented across multiple sources (CVE-2021-39582; affected by swftools utilities that process SWF files). The ...
CVE-2021-39593
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfFontExtractDefineFontInfo located in swftext.c. It allows an attacker to cause Denial of Service...
CVE-2021-39593
Summary: CVE-2021-39593 affects swftools up to 20200710, where a NULL pointer dereference in swf_FontExtract_DefineFontInfo() (swftext.c) can cause Denial of Service. Connected sources consistently describe the same root cause and impact across multiple advisories (e.g., Debian, Red Hat, CNVD, OS...
CVE-2021-39593
Removed by vendor...
CVE-2021-39582
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...
CVE-2021-39564
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause code Execution...
CVE-2021-39564
Removed by vendor...
CVE-2021-39564
CVE-2021-39564 affects swftools up to version 20200710, with a heap-buffer-overflow in swf_DumpActions() in swfaction.c that can lead to code execution. This vulnerability is documented across multiple feeds (NVD and CNVD entries) and is publicly described as a heap overflow flaw enabling attacke...
CVE-2021-39558
An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage located in VectorGraphicOutputDev.cc. It allows an attacker to cause code Execution...
CVE-2021-39558
CVE-2021-39558 affects swftools (through 20200710). A stack-buffer-overflow occurs in VectorGraphicOutputDev::drawGeneralImage() in VectorGraphicOutputDev.cc, allowing an attacker to cause code execution. Official references describe the vulnerability and classify impact with CVSS metrics (base s...
CVE-2021-39558
Removed by vendor...
CVE-2021-39594
The CVE-2021-39594 issue is in swftools up to 20200710, with a NULL pointer dereference in updateusage() in swftext.c that allows a denial of service.
CVE-2021-39594
Removed by vendor...
CVE-2021-39579
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function stringhash located in q.c. It allows an attacker to cause code Execution...
CVE-2021-39587
Removed by vendor...
CVE-2021-39579
Removed by vendor...
CVE-2021-39579
CVE-2021-39579 : The vulnerability is in swftools (through 20200710) where a heap-buffer-overflow in function string_hash() (q.c) can lead to code execution. Multiple connected reports corroborate the flaw across diverse vendors and advisories (NVD, Red Hat, CNVD, OSV, CNVD, etc.). The provided d...
CVE-2021-39587
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpABC located in abc.c. It allows an attacker to cause Denial of Service...