CVE-2017-9924

Removed by vendor...

CVE-2017-9927

Removed by vendor...

CVE-2017-9925

Removed by vendor...

CVE-2017-9926

Removed by vendor...

CVE-2017-8420

Removed by vendor...

CVE-2017-9924

CVE-2017-9924 affects SWFTools 2013-04-09-1007 on Windows, where png2swf can be driven by a crafted file to execute arbitrary code or cause a denial of service. The root cause is described as a User Mode Write AV access starting at image00000000_00400000+0x000000000001b72a, enabling remote exploi...

CVE-2017-8420

SWFTools 2013-04-09-1007 on Windows has a "Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x0000000000003e71" issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS Access...

CVE-2017-9926

In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to a "Read Access Violation starting at image0000000000400000+0x000000000001b596."...

CVE-2017-9925

CVE-2017-9925 affects SWFTools 2013-04-09-1007 on Windows, specifically the png2swf component. The vulnerability is a buffer overflow in png2swf that allows a remote attacker to execute arbitrary code or cause a denial of service by processing a specially crafted file. The root cause is described...

CVE-2017-8420

SWFTools 2013-04-09-1007 on Windows is affected by a DoS vulnerability where a malformed TTF file mishandled by font2swf causes an access violation (Data from Faulting Address controls Branch Selection at image00000000_00400000+0x0000000000003e71). The issue’s root cause is in the font processing...

CVE-2017-9924

In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV starting at image0000000000400000+0x000000000001b72a."...

CVE-2017-9927

CVE-2017-9927 affects SWFTools 2013-04-09-1007 on Windows, specifically the png2swf component. A crafted file can cause a denial of service via a Read Access Violation starting at image00000000_00400000+0x000000000001b5fe. The connected documents corroborate the Windows PNG2SWF vulnerability and ...

Debian DLA-995-1 : swftools security update

CVE-2017-8400 In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

[SECURITY] [DLA 995-1] swftools security update

Package : swftools Version : 0.9.2+ds1-3+deb7u1 CVE ID : CVE-2017-8400 CVE-2017-8401 CVE-2017-8400 In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attacker...

DLA-995-1 swftools - security update

Bulletin has no description...

openSUSE Security Update : swftools (openSUSE-2017-564)

This update for swftools fixes the following issues : - CVE-2017-8400: out-of-bound write of heap data issue bsc1037050 - CVE-2017-8401: out-of-bound read of heap data issue bsc1037051 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Design/Logic Flaw

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...

CVE-2017-7698

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...

CVE-2017-7698

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...

CVE-2017-7698

The CVE-2017-7698 issue affects swftools prior to or including 0.9.2, where a Use After Free in the pdf2swf component can allow code execution via a malformed PDF. The root cause is a memory-management flaw tied to bundled code from Xpdf 3.02 (Gfx.cc), enabling remote attackers to execute arbitra...