Lucene search
+L

1561 matches found

Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.5 views

PT-2024-19614 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a heap-use-after-free in the bufferWriteData function located in swftools/lib/action/compile.c. This allows for unauthorized access. BrazenBamboo has been found to exploit this issue...

7.8CVSS7AI score0.00298EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.5 views

PT-2024-19610 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-use-after-free issue was found in the function input at lex.swf5.c:2620, allowing an attacker to cause denial of service. Recommendations: For SWFTools version 0.9.2, consider disabling the function...

5.5CVSS7AI score0.00301EPSS
SaveExploits1References10
CVE
CVE
added 2024/01/19 12:0 a.m.52 views

CVE-2024-22915

SWFTools 0.9.2 is affected by a heap-use-after-free in the function swf_DeleteTag (rfxswf.c:1193) that can lead to arbitrary code execution. The vulnerability is confirmed across multiple sources, with attackers able to trigger code execution locally. There is no patch/version fix detail in the p...

7.8CVSS7.7AI score0.00376EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.8 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a mix-up in the instruction responsible for freeing memory in the input method of the lex.swf5.c:2620 page. An attacker could exploit...

5.5CVSS6.6AI score0.00301EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.6 views

PT-2024-19487 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a Stack Buffer Underflow in the dict foreach keyvalue function located at swftools/lib/q.c. This can potentially lead to a denial of service. Recommendations: For swftools version...

7.8CVSS7.3AI score0.00285EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2024/01/19 12:0 a.m.27 views

CVE-2024-22920

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...

7.8AI score0.00298EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.10 views

PT-2024-19611 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A heap-use-after-free issue was found in the function swf DeleteTag at rfxswf.c:1193. This issue allows an attacker to cause code execution. Recommendations: For SWFTools version 0.9.2, consider disabling t...

7.8CVSS7.4AI score0.00376EPSS
SaveExploits1References9
CVE
CVE
added 2024/01/19 12:0 a.m.48 views

CVE-2024-22920

CVE-2024-22920 affects swftools 0.9.2. The vulnerability is a heap-use-after-free in bufferWriteData (swftools/lib/action/compile.c) caused by a memory misreference, per multiple sources. Potential impact includes crashes and, per CNVD/CNNVD/NVD summaries, may allow arbitrary behavior; commercial...

7.8CVSS7.6AI score0.00298EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/19 12:0 a.m.13 views

CVE-2024-22920

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...

7.3AI score0.00298EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/01/19 12:0 a.m.28 views

CVE-2024-22913

A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution...

7.9AI score0.00358EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/19 12:0 a.m.49 views

CVE-2024-22913

SWFTools v0.9.2 is affected by a heap-buffer-overflow in the function swf5lex (lex.swf5.c:1321) that can lead to code execution. Multiple sources corroborate the flaw in SWFTools 0.9.2; attack vector is not described in detail in these documents, and no vendor patch is clearly documented within t...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.5 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the swftools/src/swfc.c:2576 page that fails to correctly validate the length of the input data, and can be...

7.8CVSS8AI score0.00331EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/01/19 12:0 a.m.37 views

CVE-2024-22919

swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587...

7.8AI score0.00331EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/01/19 12:0 a.m.6 views

CVE-2024-22915

A heap-use-after-free was found in SWFTools v0.9.2, in the function swfDeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution...

7.1AI score0.00376EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/19 12:0 a.m.225 views

CVE-2024-22562

CVE-2024-22562 affects swftools 0.9.2 with a Stack Buffer Underflow in dict_foreach_keyvalue (swftools/lib/q.c). Root cause: validation weakness in input handling leading to a buffer underflow. Impact: potential arbitrary code execution or denial of service (as described across sources). Exploit ...

7.8CVSS7.6AI score0.00285EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/19 12:0 a.m.39 views

CVE-2024-22562

swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dictforeachkeyvalue at swftools/lib/q.c...

7.9AI score0.00285EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/19 12:0 a.m.52 views

CVE-2024-22912

SWFTools v0.9.2 is affected by CVE-2024-22912: a global-buffer-overflow in the countline function (swf5compiler.flex:327) can lead to code execution. This is documented across multiple sources (NVD/CVE listings and vendor advisories). The vulnerability stems from improper input length validation ...

7.8CVSS7.7AI score0.00357EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2024/01/19 12:0 a.m.212 views

CVE-2024-22911

SWFTools 0.9.2 has a stack-buffer-underflow in parseExpression (src/swfc.c:2602). The vulnerability is described as potentially enabling arbitrary code execution or denial of service. Public documents do not specify an official patched version. A workaround suggestion exists in PT-2024-19607 to d...

7.8CVSS7.5AI score0.00331EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/19 12:0 a.m.42 views

CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

7.8AI score0.00331EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/01/19 12:0 a.m.13 views

CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

7.1AI score0.00331EPSS
SaveExploits1References1
Rows per page
Query Builder