CVE-2024-22957: Out-of-bounds Read

swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dictdolookup in swftools/lib/q.c:1190...

CVE-2024-22913

A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution...

CVE-2024-22912

A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...

CVE-2024-22915

A heap-use-after-free was found in SWFTools v0.9.2, in the function swfDeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution...

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

CVE-2024-22913

SWFTools v0.9.2 is affected by a heap-buffer-overflow in the function swf5lex (lex.swf5.c:1321) that can lead to code execution. Multiple sources corroborate the flaw in SWFTools 0.9.2; attack vector is not described in detail in these documents, and no vendor patch is clearly documented within t...

PT-2024-19487 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a Stack Buffer Underflow in the dict foreach keyvalue function located at swftools/lib/q.c. This can potentially lead to a denial of service. Recommendations: For swftools version...

PT-2024-19614 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a heap-use-after-free in the bufferWriteData function located in swftools/lib/action/compile.c. This allows for unauthorized access. BrazenBamboo has been found to exploit this issue...

CVE-2024-22915

SWFTools 0.9.2 is affected by a heap-use-after-free in the function swf_DeleteTag (rfxswf.c:1193) that can lead to arbitrary code execution. The vulnerability is confirmed across multiple sources, with attackers able to trigger code execution locally. There is no patch/version fix detail in the p...

CVE-2024-22914

A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service...

CVE-2024-22562

swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dictforeachkeyvalue at swftools/lib/q.c...

CVE-2024-22912

A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...

CVE-2024-22915

A heap-use-after-free was found in SWFTools v0.9.2, in the function swfDeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution...

CVE-2024-22920

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds read vulnerability exists in SWFTools version 0.9.2, which stems from a lack of proper validation of user-supplied data in the dictdolookup method on the swftools/lib/q.c:1190 page, which can be exploite...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a confusion in the instructions responsible for freeing memory in the bufferWriteData method of the swftools/lib/action/compile.c pag...

PT-2024-19609 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-buffer-overflow was found in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling the swf5lex functi...

SWFTools Security Vulnerabilities

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools version 0.9.2, which stems from a heap release use-after-free vulnerability in the removeFromTo method on the swftools/src/swfc.c:8...

PT-2024-19628 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A heap-use-after-free issue was discovered in swftools via the removeFromTo function at swftools/src/swfc.c:838. This issue can potentially lead to a denial of service. Recommendations: For swftools version...

PT-2024-19611 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-use-after-free issue was found in the function swf DeleteTag at rfxswf.c:1193. This issue allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling t...