44 matches found
EUVD-2017-1468
Malware in sbrugna...
EUVD-2017-1469
Malware in sbrugna...
EUVD-2023-41525
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2017-1000187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF CVE-2017-1000187 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-1000186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SWFTools, a stack overflow was found in pdf2swf. CVE-2017-1000186 Note that Nessus relies on the presence of the package as reported by the vendor...
CVE-2017-1000186
In SWFTools, a stack overflow was found in pdf2swf...
CVE-2017-1000187
In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...
CVE-2025-1676
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can be launched remotely. The exploit has...
CVE-2025-1676 hzmanyun Education and Training System pdf2swf os command injection
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can be launched remotely. The exploit has...
CVE-2025-1676: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can be launched remotely. The exploit has...
PT-2025-7822
Name of the Vulnerable Software and Affected Versions hzmanyun Education and Training System version 3.1.1 Description A critical vulnerability was found in the hzmanyun Education and Training System. The issue affects the pdf2swf function of the file /pdf2swf. The manipulation of the file argume...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
Design/Logic Flaw
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
CVE-2023-37644 affects SWFTools 0.9.2 (772e55a). The issue is in the PNG handling path: png_read_chunk in lib/png.c, where a crafted document can trigger a large memory allocation. Connected sources corroborate the same description across multiple advisories (e.g., Red Hat, Ubuntu, NVD/NVDB deriv...
CVE-2023-37644: Out-of-bounds Write
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
SUSE CVE-2017-7698
A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02...
SUSE CVE-2017-1000187
In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...
Updated swftools packages fix security vulnerability
A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, due to bundled code in Gfx.cc from Xpdf 3.02 CVE-2017-7698...