CVE-2021-39585

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traitsdump located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39591

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfGetShapeBoundingBox located in swfshape.c. It allows an attacker to cause Denial of Service...

CVE-2021-39591

CVE-2021-39591 affects swftools (up to 20200710). The NULL pointer dereference in swf_GetShapeBoundingBox() (swfshape.c) can cause a Denial of Service. Connected sources confirm the issue but do not provide a vendor patch/version remediation in the documents; no exploit details are included.

CVE-2021-39588

Removed by vendor...

CVE-2021-39585

The CVE-2021-39585 entry concerns swftools (up to 20200710). The root cause is a NULL pointer dereference in the function traits_dump() located in abc.c, which can lead to a Denial of Service. Impact is described as availability impact (DoS); attack vector and exploitation details are not provide...

CVE-2021-39591

Removed by vendor...

CVE-2021-39585

Removed by vendor...

CVE-2021-39593

Summary: CVE-2021-39593 affects swftools up to 20200710, where a NULL pointer dereference in swf_FontExtract_DefineFontInfo() (swftext.c) can cause Denial of Service. Connected sources consistently describe the same root cause and impact across multiple advisories (e.g., Debian, Red Hat, CNVD, OS...

CVE-2021-39593

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfFontExtractDefineFontInfo located in swftext.c. It allows an attacker to cause Denial of Service...

CVE-2021-39582

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...

CVE-2021-39582

SWFTools (up to version 20200710) contains a heap-buffer-overflow in swf_GetPlaceObject() implemented in swfobject.c, allowing attackers to achieve code execution. The vulnerability is documented across multiple sources (CVE-2021-39582; affected by swftools utilities that process SWF files). The ...

CVE-2021-39582

Removed by vendor...

CVE-2021-39593

Removed by vendor...

CVE-2021-39564

Removed by vendor...

CVE-2021-39564

CVE-2021-39564 affects swftools up to version 20200710, with a heap-buffer-overflow in swf_DumpActions() in swfaction.c that can lead to code execution. This vulnerability is documented across multiple feeds (NVD and CNVD entries) and is publicly described as a heap overflow flaw enabling attacke...

CVE-2021-39564

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause code Execution...

CVE-2021-39594

The CVE-2021-39594 issue is in swftools up to 20200710, with a NULL pointer dereference in updateusage() in swftext.c that allows a denial of service.

CVE-2021-39594

Removed by vendor...

CVE-2021-39558

Removed by vendor...

CVE-2021-39558

CVE-2021-39558 affects swftools (through 20200710). A stack-buffer-overflow occurs in VectorGraphicOutputDev::drawGeneralImage() in VectorGraphicOutputDev.cc, allowing an attacker to cause code execution. Official references describe the vulnerability and classify impact with CVSS metrics (base s...