CVE-2017-16868: NULL Pointer Dereference

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-1000186: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a stack overflow was found in pdf2swf...

CVE-2017-1000176: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a memcpy buffer overflow was found in swfc...

CVE-2017-1000182: Missing Release of Resource after Effective Lifetime

In SWFTools, a memory leak was found in wav2swf...

SWFTools Address Access Exception Vulnerability (CNVD-2017-37275)

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in SWFTools in pdf2swf. FoFiTrueType::writeTTF. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-1000174: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000185: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a memcpy buffer overflow was found in gif2swf...

SWFTools memcpy buffer overflow vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A memcpy buffer overflow vulnerability exists in swfc in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-1000187: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

SWFTools Denial of Service Vulnerability (CNVD-2017-36496)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2. A remote attacker can exploit this vulnerability to cause a denial of service integer overflow, heap buffer...

SWFTools Denial of Service Vulnerability (CNVD-2017-36497)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2, which stems from the program's failure to detect the return value of a realloc call. A remote attacker can exploit...

SWFTools Denial of Service Vulnerability (CNVD-2017-36499)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2, which stems from the program failing to properly validate WAV data. A remote attacker can exploit this...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

Code injection

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

UBUNTU-CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

Integer overflow

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...