SWFTools Address Access Exception Vulnerability (CNVD-2017-37275)

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in SWFTools in pdf2swf. FoFiTrueType::writeTTF. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-16868: NULL Pointer Dereference

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-1000187: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

CVE-2017-1000186: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a stack overflow was found in pdf2swf...

CVE-2017-1000185: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a memcpy buffer overflow was found in gif2swf...

CVE-2017-1000182: Missing Release of Resource after Effective Lifetime

In SWFTools, a memory leak was found in wav2swf...

CVE-2017-1000176: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, a memcpy buffer overflow was found in swfc...

CVE-2017-1000174: Improper Restriction of Operations within the Bounds of a Memory Buffer

In SWFTools, an address access exception was found in swfdump swfGetBits...

PT-2017-14605

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises from the wav convert2mono function in lib/wav.c, which fails to properly restrict a multiplication within a malloc call. This allows remote attackers to cause a denial of service through an...

PT-2017-10871

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description An address access exception was found in the swfdump function swf GetBits. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2017-10879

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A memory leak was found in the wav2swf component of SWFTools. Recommendations At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2017-10882

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A memcpy buffer overflow issue was discovered in the gif2swf component of SWFTools. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2017-10873

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A memcpy buffer overflow issue was discovered in the swfc component of SWFTools. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2017-10884

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description An address access exception was found in the pdf2swf component of SWFTools, specifically in the FoFiTrueType::writeTTF function. Recommendations At the moment, there is no information about ...

PT-2017-10883

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A stack overflow issue was discovered in the pdf2swf component of SWFTools. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

SWFTools Denial of Service Vulnerability (CNVD-2017-36496)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2. A remote attacker can exploit this vulnerability to cause a denial of service integer overflow, heap buffer...

SWFTools Denial of Service Vulnerability (CNVD-2017-36497)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2, which stems from the program's failure to detect the return value of a realloc call. A remote attacker can exploit...

SWFTools Denial of Service Vulnerability (CNVD-2017-36499)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2, which stems from the program failing to properly validate WAV data. A remote attacker can exploit this...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...