1558 matches found
CVE-2023-26991
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...
PT-2023-20891 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A stack-use-after-scope issue was discovered in the swf ReadSWF2 function in lib/rfxswf.c. This issue affects the SWFTools software. Recommendations: For SWFTools version 0.9.2, at the moment, there is no...
CVE-2023-26991
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...
SWFTools 资源管理错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools version v0.9.2, which stems from a stack overflow vulnerability in the swfReadSWF2 function in lib/rfxswf.c. The vulnerability is...
CVE-2023-26991
CVE-2023-26991 affects SWFTools v0.9.2. The vulnerability is a stack-use-after-scope in the function swf_ReadSWF2 (lib/rfxswf.c). According to the CVSS data, it has a High impact (C/H/I/A) with Local attack vector, low attack complexity, no privileges required and user interaction required. The i...
swftools 安全漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools version v0.9.2, which stems from the readU16 function of ttf.c containing a segmentation violation...
SUSE CVE-2017-7698
A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...
SUSE CVE-2017-8401
In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...
SUSE CVE-2017-10976
When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c...
SUSE CVE-2017-11096
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfDeleteFilter function in lib/modules/swffilter.c...
SUSE CVE-2017-11098
When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the pngload function in lib/png.c...
SUSE CVE-2017-11097
When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...
SUSE CVE-2017-11101
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfRelocate function in lib/modules/swftools.c...
SUSE CVE-2017-11099
When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...
SUSE CVE-2017-16793
The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
SUSE CVE-2017-16796
In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...
SUSE CVE-2017-16797
In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...
SUSE CVE-2017-16794
The pngload function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an erroneous...
SUSE CVE-2017-16868
In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...