CVE-2017-11096

When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfDeleteFilter function in lib/modules/swffilter.c...

CVE-2017-11098

When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the pngload function in lib/png.c...

CVE-2017-11099

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

CVE-2017-11100

SWFTools 0.9.2 is affected. Processing a crafted SWF via swfextract can trigger a NULL pointer dereference in swf_FoldSprite() (lib/rxfswf.c). Impacts include crashes; exploitation details are not provided in the supplied documents. CVSS data: CVSSv3 Base 8.8 (HIGH), AV:N/AC:L/PR:N/UI:R/S:U/C:H/I...

CVE-2017-11097

When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...

CVE-2017-11096

CVE-2017-11096 affects SWFTools 0.9.2 when processing a crafted SWF file in the swfcombine flow, causing a NULL pointer dereference in the function swf_DeleteFilter() within lib/modules/swffilter.c. The vulnerability is triggered during file processing and can lead to a crash or potential denial ...

CVE-2017-11100

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...

CVE-2017-11097

CVE-2017-11097 affects SWFTools 0.9.2, where processing a crafted file in swfc can trigger a NULL pointer dereference in dict_lookup() (lib/q.c). The incident is documented with CVSS both 2.0/3.0 vectors, indicating network attack potential with partial impact to confidentiality, integrity, and a...

CVE-2017-11101

CVE-2017-11101 affects SWFTools 0.9.2’s swfcombine, with a NULL pointer dereference in lib/modules/swftools.c (swf_Relocate()). This is triggered by processing a crafted SWF file, per multiple sources. Impact is described as causing a crash/denial of service; exploitation details and vendor patch...

CVE-2017-11099

Removed by vendor...

CVE-2017-11097

Removed by vendor...

CVE-2017-11100

Removed by vendor...

CVE-2017-11096

Removed by vendor...

CVE-2017-11101

Removed by vendor...

CVE-2017-11098

Removed by vendor...

SWFTools on Windows png2swf Buffer Overflow Vulnerability

SWFTools on Windows is a Windows-based utility toolset for working with Adobe Flash files SWF files. png2swf is one of the file format conversion components. A buffer overflow vulnerability exists in png2swf in SWFTools 2013-04-09-1007 on Windows. A remote attacker can exploit this vulnerability ...

SWFTools 'readBlock()' heap buffer read vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A heap buffer read vulnerability exists in the 'readBlock' function of the lib/ttf.c file in SWFTools version 0.9.2. The vulnerability can be exploited to cause a heap buffer out-of-bounds read with the hel...

SWFTools on Windows png2swf buffer overflow vulnerability (CNVD-2017-13991)

SWFTools on Windows is a Windows-based utility toolset for working with Adobe Flash files SWF files. png2swf is one of the file format conversion components. A buffer overflow vulnerability exists in png2swf in SWFTools 2013-04-09-1007 on Windows. A remote attacker can exploit this vulnerability ...

SWFTools on Windows png2swf buffer overflow vulnerability (CNVD-2017-13993)

SWFTools on Windows is a Windows-based utility toolset for working with Adobe Flash files SWF files. png2swf is one of the file format conversion components. A buffer overflow vulnerability exists in png2swf in SWFTools 2013-04-09-1007 on Windows. A remote attacker can exploit this vulnerability ...

SWFTools Denial of Service Vulnerability (CNVD-2017-15100)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in version 2013-04-09-1007 of SWFTools for Windows-based platforms. A remote attacker can exploit this vulnerability to cause a denial of service with malformed TTF files...