CVE-2017-11100

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...

CVE-2017-11097

When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...

CVE-2017-11100

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...

CVE-2017-11096

CVE-2017-11096 affects SWFTools 0.9.2 when processing a crafted SWF file in the swfcombine flow, causing a NULL pointer dereference in the function swf_DeleteFilter() within lib/modules/swffilter.c. The vulnerability is triggered during file processing and can lead to a crash or potential denial ...

CVE-2017-11098

When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the pngload function in lib/png.c...

CVE-2017-11101

CVE-2017-11101 affects SWFTools 0.9.2’s swfcombine, with a NULL pointer dereference in lib/modules/swftools.c (swf_Relocate()). This is triggered by processing a crafted SWF file, per multiple sources. Impact is described as causing a crash/denial of service; exploitation details and vendor patch...

CVE-2017-11101

When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfRelocate function in lib/modules/swftools.c...

CVE-2017-11096

When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfDeleteFilter function in lib/modules/swffilter.c...

CVE-2017-11099

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

CVE-2017-11101

Removed by vendor...

CVE-2017-11100

Removed by vendor...

CVE-2017-11099

Removed by vendor...

CVE-2017-11097

Removed by vendor...

CVE-2017-11096

Removed by vendor...

CVE-2017-11098

Removed by vendor...

PT-2017-11739

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises when SWFTools processes a crafted file in wav2swf, leading to a Segmentation Violation in the wav convert2mono function in lib/wav.c. Recommendations For SWFTools version 0.9.2, as a temporar...

PT-2017-11741

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue occurs when SWFTools processes a crafted file in swfextract, leading to a NULL Pointer Dereference in the swf FoldSprite function in lib/rxfswf.c. Recommendations For SWFTools version 0.9.2, conside...

PT-2017-11742

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises when SWFTools processes a crafted file using swfcombine, resulting in a NULL Pointer Dereference in the swf Relocate function located in lib/modules/swftools.c. Recommendations For SWFTools...

PT-2017-11737

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises when SWFTools processes a crafted file in swfc, leading to a NULL Pointer Dereference in the dict lookup function in lib/q.c. Recommendations For SWFTools version 0.9.2, consider avoiding the...

SWFTools 'readBlock()' heap buffer read vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A heap buffer read vulnerability exists in the 'readBlock' function of the lib/ttf.c file in SWFTools version 0.9.2. The vulnerability can be exploited to cause a heap buffer out-of-bounds read with the hel...