Lucene search
+L

1690 matches found

CNNVD
CNNVD
•added 2024/01/19 12:00 a.m.•17 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the src/swfc.c:2602 page that fails to properly validate the length of the input data, and can be exploited...

7.8CVSS8AI score0.00333EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/01/16 12:00 a.m.•50 views

SWFTools Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. The SWFTools version suffers from a buffer overflow vulnerability that stems from a boundary error in the pngreadchunk function when processing png files. An attacker could exploit the vulnerability to trigger a...

5.5CVSS7.2AI score0.0027EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/11 8:15 a.m.•17 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/11 8:15 a.m.•30 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.3AI score0.0027EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/11 8:15 a.m.•10 views

UBUNTU-CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/11 8:15 a.m.•37 views

Design/Logic Flaw

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

1.9CVSS6.9AI score0.0027EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2024/01/11 8:15 a.m.•32 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS6.1AI score0.0027EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/11 12:00 a.m.•18 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. The SWFTools version suffers from a buffer overflow vulnerability that stems from a boundary error in the pngreadchunk function when processing png files. An attacker could exploit the vulnerability to trigger a...

5.5CVSS7.1AI score0.0027EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/11 12:00 a.m.•2 views

CVE-2023-37644: Out-of-bounds Write

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS6AI score0.0027EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/11 12:00 a.m.•66 views

CVE-2023-37644

CVE-2023-37644 affects SWFTools 0.9.2 (772e55a). The issue is in the PNG handling path: png_read_chunk in lib/png.c, where a crafted document can trigger a large memory allocation. Connected sources corroborate the same description across multiple advisories (e.g., Red Hat, Ubuntu, NVD/NVDB deriv...

5.5CVSS5.6AI score0.0027EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/11 12:00 a.m.•5 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.3AI score0.0027EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/11 12:00 a.m.•47 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.6AI score0.0027EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2024/01/10 12:20 p.m.•88 views

global-buffer-overflow exists in countline() at lib/swf5compiler.flex:327

Summary A global-buffer-overflow caused when using swfc. V...

7.3AI score
SaveExploits0
OSV
OSV
•added 2023/04/27 8:15 p.m.•15 views

CVE-2023-29950

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c...

5.5CVSS6.3AI score0.00323EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•12 views

swfrender 缓冲区错误漏洞

swfrender is swftools open source an image extraction technology. Swfrender v0.9.2 version has a security vulnerability , the vulnerability stems from the enumerateUsedIDsfillstyle function via modules/swftools.c to send a letter ah contains a heap buffer overflow vulnerability...

5.5CVSS5.9AI score0.00323EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/04/27 12:00 a.m.•14 views

CVE-2023-29950

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c...

5.8AI score0.00323EPSS
SaveExploits1References1
OSV
OSV
•added 2023/04/04 3:15 p.m.•16 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS5.8AI score0.00311EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/04 3:15 p.m.•47 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS7.6AI score0.00311EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2023/04/04 3:15 p.m.•44 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS7.1AI score0.00311EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/04 3:15 p.m.•30 views

Code injection

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

4.4CVSS7.6AI score0.00311EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder