CVE-2017-11101

When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfRelocate function in lib/modules/swftools.c...

CVE-2017-11099

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

CVE-2017-11097

CVE-2017-11097 affects SWFTools 0.9.2, where processing a crafted file in swfc can trigger a NULL pointer dereference in dict_lookup() (lib/q.c). The incident is documented with CVSS both 2.0/3.0 vectors, indicating network attack potential with partial impact to confidentiality, integrity, and a...

CVE-2017-11100

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...

CVE-2017-11096

Removed by vendor...

CVE-2017-11100

Removed by vendor...

CVE-2017-11098

Removed by vendor...

CVE-2017-11100

SWFTools 0.9.2 is affected. Processing a crafted SWF via swfextract can trigger a NULL pointer dereference in swf_FoldSprite() (lib/rxfswf.c). Impacts include crashes; exploitation details are not provided in the supplied documents. CVSS data: CVSSv3 Base 8.8 (HIGH), AV:N/AC:L/PR:N/UI:R/S:U/C:H/I...

CVE-2017-11096

CVE-2017-11096 affects SWFTools 0.9.2 when processing a crafted SWF file in the swfcombine flow, causing a NULL pointer dereference in the function swf_DeleteFilter() within lib/modules/swffilter.c. The vulnerability is triggered during file processing and can lead to a crash or potential denial ...

CVE-2017-11096

When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfDeleteFilter function in lib/modules/swffilter.c...

CVE-2017-11099

Removed by vendor...

CVE-2017-11101

Removed by vendor...

CVE-2017-11098

CVE-2017-11098 affects SWFTools 0.9.2. The vulnerability arises when processing a crafted file in the png2swf workflow, triggering a segmentation fault in the png_load() function within lib/png.c. The description and connected sources consistently report a crash/segfault as the impact. No concret...

SWFTools on Windows png2swf buffer overflow vulnerability (CNVD-2017-13991)

SWFTools on Windows is a Windows-based utility toolset for working with Adobe Flash files SWF files. png2swf is one of the file format conversion components. A buffer overflow vulnerability exists in png2swf in SWFTools 2013-04-09-1007 on Windows. A remote attacker can exploit this vulnerability ...

SWFTools Denial of Service Vulnerability (CNVD-2017-15100)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in version 2013-04-09-1007 of SWFTools for Windows-based platforms. A remote attacker can exploit this vulnerability to cause a denial of service with malformed TTF files...

CVE-2017-11099: Improper Input Validation

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

CVE-2017-11100: NULL Pointer Dereference

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...

SWFTools 'readBlock()' heap buffer read vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A heap buffer read vulnerability exists in the 'readBlock' function of the lib/ttf.c file in SWFTools version 0.9.2. The vulnerability can be exploited to cause a heap buffer out-of-bounds read with the hel...

SWFTools on Windows png2swf Buffer Overflow Vulnerability

SWFTools on Windows is a Windows-based utility toolset for working with Adobe Flash files SWF files. png2swf is one of the file format conversion components. A buffer overflow vulnerability exists in png2swf in SWFTools 2013-04-09-1007 on Windows. A remote attacker can exploit this vulnerability ...

CVE-2017-11097: NULL Pointer Dereference

When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...