SWFTools Denial of Service Vulnerability (CNVD-2017-37437)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2, which stems from the program's failure to properly restrict multiplication in malloc calls. The...

CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

Integer overflow

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

UBUNTU-CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-16868

Removed by vendor...

CVE-2017-16868

CVE-2017-16868 affects SWFTools 0.9.2. The vulnerability lies in the wav_convert2mono function (lib/wav.c), where a multiplication within a malloc call is not properly restricted, enabling an attacker to cause a denial of service via a crafted WAV file through integer overflow and NULL pointer de...

CVE-2017-1000182

In SWFTools, a memory leak was found in wav2swf...

UBUNTU-CVE-2017-1000176

In SWFTools, a memcpy buffer overflow was found in swfc...

UBUNTU-CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

CVE-2017-1000185

In SWFTools, a memcpy buffer overflow was found in gif2swf...

UBUNTU-CVE-2017-1000182

In SWFTools, a memory leak was found in wav2swf...

Stack overflow

In SWFTools, a stack overflow was found in pdf2swf...

CVE-2017-1000182

In SWFTools, a memory leak was found in wav2swf...

CVE-2017-1000176

In SWFTools, a memcpy buffer overflow was found in swfc...

CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

Code injection

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

Design/Logic Flaw

In SWFTools, a memory leak was found in wav2swf...