PT-2024-19611 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-use-after-free issue was found in the function swf DeleteTag at rfxswf.c:1193. This issue allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling t...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the swftools/src/swfc.c:2576 page that fails to correctly validate the length of the input data, and can be...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the swf5lex method on the lex.swf5.c:1321 page that fails to correctly validate the length of the input data, and can be exploited by an...

CVE-2024-22920

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...

CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

CVE-2024-22956

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838...

CVE-2024-22956

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838...

CVE-2024-22955

swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a confusion in the instructions responsible for freeing memory in the bufferWriteData method of the swftools/lib/action/compile.c pag...

CVE-2024-22562: Out-of-bounds Write

swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dictforeachkeyvalue at swftools/lib/q.c...

CVE-2024-22956: Use After Free

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838...

CVE-2024-22911: Out-of-bounds Write

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

CVE-2024-22919: Buffer Copy without Checking Size of Input

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

CVE-2024-22913: Out-of-bounds Write

A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution...

CVE-2024-22914

CVE-2024-22914 affects SWFTools 0.9.2; a heap-use-after-free in the input handling (lex.swf5.c:2620) can cause denial of service. Exploitation is described as local with user interaction required; no patch details are provided in the sources. A practical workaround mentioned in PT-2024-19610 is t...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a mix-up in the instruction responsible for freeing memory in the input method of the lex.swf5.c:2620 page. An attacker could exploit...

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

CVE-2024-22919

Swftools 0.9.2 contains a global-buffer-overflow in parseExpression (swftools/src/swfc.c:2587). Affected component is the swftools suite; vulnerability can potentially allow arbitrary code execution or denial of service. The issue is documented across multiple sources (CNVD/CNNVD, NVD, other vend...

CVE-2024-22955

swftools 0.9.2 is affected by a stack-buffer-underflow in parseExpression (swftools/src/swfc.c:2576). The issue arises from insufficient input length validation and can enable arbitrary code execution or denial of service. CVSS v3.1 base score 7.8 (High, Local, User Interaction required). Remedia...

CVE-2024-22957

CVE-2024-22957 affects swftools 0.9.2. The vulnerability is an Out-of-bounds Read in dict_do_lookup (swftools/lib/q.c:1190) caused by insufficient validation of user-supplied data. Impact per sources includes potential denial of service; exploitation status is not detailed in the provided docs. S...