EUVD-2017-2736

Malware in sbrugna...

CVE-2017-16890

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

CVE-2017-16890

SWFTools 0.9.2 is affected by CVE-2017-16890 due to a divide-by-zero in wav_convert2mono (lib/wav.c) when the align value can be zero. The issue is documented across multiple feeds; Debian lists it as removed by vendor, indicating some patch status, while other sources do not confirm a vendor pat...

CVE-2017-16868

CVE-2017-16868 affects SWFTools 0.9.2. The vulnerability lies in the wav_convert2mono function (lib/wav.c), where a multiplication within a malloc call is not properly restricted, enabling an attacker to cause a denial of service via a crafted WAV file through integer overflow and NULL pointer de...