CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

Design/Logic Flaw

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

UBUNTU-CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

CVE-2017-8401

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

CVE-2017-8401

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

CVE-2017-8401

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

UBUNTU-CVE-2017-8401

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in lib/png.c:755 within png_load(), triggered by a malformed PNG handled by png2swf. The issue could be exploited to cause DoS and, per the CVE description, may lead to arbitrary code execution. Public advisories (Mageia MGASA-2017-...

CVE-2017-8401

Removed by vendor...

CVE-2017-8400

Removed by vendor...

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

CVE-2017-8401

In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function pngload in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS...

CVE-2017-8401

CVE-2017-8401 affects SWFTools 0.9.2, where an out-of-bounds read of heap data can occur in png_load() (lib/png.c:724) when processing a malformed PNG file, potentially allowing a denial-of-service. Connected sources confirm this exact flaw and note remediation through vendor/ distro updates: Deb...

png2swf png_read _chunk function null pointer reference denial of service vulnerability

SWFTools is a set of software tools for SWF manipulation and creation of utility authoring.Png2swf is a freeware program that converts PNG format images into lively flash SWF format files. The pngread chunk function null pointer dereference in the swftools 0.9.2 and previous versions of the png2s...

Font Variable Null Pointer Denial of Service Vulnerability in swfstrigns

SWFTools is a set of software tools for SWF manipulation and creation of utility authoring. swfstrings is a text parsing tool. In versions swftools-0.9.2, 0.9.1, 0.8.0, 0.8.1, 0.4.4, elements in the global static array fonts are set to 0x0 and fail to validate their read operation, resulting in a...

swfdump Debugging Code Denial of Service Vulnerability

SWFTools is a set of SWF manipulation and creation of utility authoring software tools. swfdump displays the id, name and depth of objects defined in the SWF file. It can also further decompose Actionscript, extract text, and display location information objects. A debugging code denial of servic...

swfstrings rfxswf.c file swf_GetU8 function debug code denial of service vulnerability

SWFTools is a collection of SWF manipulation and creation utility authoring software tools. swfstrings are text parsing tools. A debugging code denial of service vulnerability exists in swftools version 0.9.2 and swftools version 0.9.1. The vulnerability arises because the swfGetU8 function in th...

swfdump swf_GetBits function t-data denial of service vulnerability

SWFTools is a set of SWF manipulation and creation of utility authoring software tools. swfdump displays the id, name and depth of objects defined in the SWF file. It can further decompose Actionscript, extract text, and display location information objects. In swftools 0.9.2 and previous version...