Lucene search
+L

1558 matches found

CNNVD
CNNVD
added 2024/01/19 12:0 a.m.8 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a mix-up in the instruction responsible for freeing memory in the input method of the lex.swf5.c:2620 page. An attacker could exploit...

5.5CVSS6.6AI score0.00301EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.9 views

PT-2024-19611 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-use-after-free issue was found in the function swf DeleteTag at rfxswf.c:1193. This issue allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling t...

7.8CVSS7.4AI score0.00376EPSS
SaveExploits1References9
CNVD
CNVD
added 2024/01/16 12:0 a.m.24 views

SWFTools Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. The SWFTools version suffers from a buffer overflow vulnerability that stems from a boundary error in the pngreadchunk function when processing png files. An attacker could exploit the vulnerability to trigger a...

5.5CVSS7.2AI score0.0027EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/11 8:15 a.m.25 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.3AI score0.0027EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/11 8:15 a.m.7 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/11 8:15 a.m.4 views

UBUNTU-CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2024/01/11 8:15 a.m.26 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS6.1AI score0.0027EPSS
SaveExploits1References2
Prion
Prion
added 2024/01/11 8:15 a.m.28 views

Design/Logic Flaw

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

1.9CVSS6.9AI score0.0027EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.6 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. The SWFTools version suffers from a buffer overflow vulnerability that stems from a boundary error in the pngreadchunk function when processing png files. An attacker could exploit the vulnerability to trigger a...

5.5CVSS7.1AI score0.0027EPSS
SaveExploits1References2
CVE
CVE
added 2024/01/11 12:0 a.m.43 views

CVE-2023-37644

CVE-2023-37644 affects SWFTools 0.9.2 (772e55a). The issue is in the PNG handling path: png_read_chunk in lib/png.c, where a crafted document can trigger a large memory allocation. Connected sources corroborate the same description across multiple advisories (e.g., Red Hat, Ubuntu, NVD/NVDB deriv...

5.5CVSS5.6AI score0.0027EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 12:0 a.m.3 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.3AI score0.0027EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/01/11 12:0 a.m.33 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.6AI score0.0027EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2024/01/10 12:20 p.m.80 views

global-buffer-overflow exists in countline() at lib/swf5compiler.flex:327

Summary A global-buffer-overflow caused when using swfc. V...

7.3AI score
SaveExploits0
OSV
OSV
added 2023/04/27 8:15 p.m.6 views

CVE-2023-29950

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c...

5.5CVSS6.3AI score0.0032EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/04/27 12:0 a.m.13 views

CVE-2023-29950

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c...

5.8AI score0.0032EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.4 views

swfrender 缓冲区错误漏洞

swfrender is swftools open source an image extraction technology. Swfrender v0.9.2 version has a security vulnerability , the vulnerability stems from the enumerateUsedIDsfillstyle function via modules/swftools.c to send a letter ah contains a heap buffer overflow vulnerability...

5.5CVSS5.9AI score0.0032EPSS
SaveExploits1References2
NVD
NVD
added 2023/04/04 3:15 p.m.43 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS7.6AI score0.00308EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/04 3:15 p.m.8 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS5.8AI score0.00308EPSS
SaveExploits1References1
Prion
Prion
added 2023/04/04 3:15 p.m.23 views

Code injection

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

4.4CVSS7.6AI score0.00308EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/04/04 3:15 p.m.37 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS7.1AI score0.00308EPSS
SaveExploits1References2
Rows per page
Query Builder