Lucene search
+L

1561 matches found

CVE
CVE
added 2024/01/19 12:0 a.m.212 views

CVE-2024-22955

swftools 0.9.2 is affected by a stack-buffer-underflow in parseExpression (swftools/src/swfc.c:2576). The issue arises from insufficient input length validation and can enable arbitrary code execution or denial of service. CVSS v3.1 base score 7.8 (High, Local, User Interaction required). Remedia...

7.8CVSS7.6AI score0.00331EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.10 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the src/swfc.c:2602 page that fails to properly validate the length of the input data, and can be exploited...

7.8CVSS8AI score0.00331EPSS
SaveExploits1References2
CNVD
CNVD
added 2024/01/16 12:0 a.m.24 views

SWFTools Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. The SWFTools version suffers from a buffer overflow vulnerability that stems from a boundary error in the pngreadchunk function when processing png files. An attacker could exploit the vulnerability to trigger a...

5.5CVSS7.2AI score0.0027EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/11 8:15 a.m.7 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/11 8:15 a.m.25 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.3AI score0.0027EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/11 8:15 a.m.28 views

Design/Logic Flaw

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

1.9CVSS6.9AI score0.0027EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2024/01/11 8:15 a.m.26 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS6.1AI score0.0027EPSS
SaveExploits1References2
OSV
OSV
added 2024/01/11 8:15 a.m.5 views

UBUNTU-CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/11 12:0 a.m.43 views

CVE-2023-37644

CVE-2023-37644 affects SWFTools 0.9.2 (772e55a). The issue is in the PNG handling path: png_read_chunk in lib/png.c, where a crafted document can trigger a large memory allocation. Connected sources corroborate the same description across multiple advisories (e.g., Red Hat, Ubuntu, NVD/NVDB deriv...

5.5CVSS5.6AI score0.0027EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 12:0 a.m.3 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.3AI score0.0027EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/01/11 12:0 a.m.33 views

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...

5.6AI score0.0027EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.8 views

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. The SWFTools version suffers from a buffer overflow vulnerability that stems from a boundary error in the pngreadchunk function when processing png files. An attacker could exploit the vulnerability to trigger a...

5.5CVSS7.1AI score0.0027EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2024/01/10 12:20 p.m.80 views

global-buffer-overflow exists in countline() at lib/swf5compiler.flex:327

Summary A global-buffer-overflow caused when using swfc. V...

7.3AI score
SaveExploits0
OSV
OSV
added 2023/04/27 8:15 p.m.6 views

CVE-2023-29950

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c...

5.5CVSS6.3AI score0.0032EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/04/27 12:0 a.m.13 views

CVE-2023-29950

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDsfillstyle at modules/swftools.c...

5.8AI score0.0032EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.6 views

swfrender 缓冲区错误漏洞

swfrender is swftools open source an image extraction technology. Swfrender v0.9.2 version has a security vulnerability , the vulnerability stems from the enumerateUsedIDsfillstyle function via modules/swftools.c to send a letter ah contains a heap buffer overflow vulnerability...

5.5CVSS5.9AI score0.0032EPSS
SaveExploits1References2
NVD
NVD
added 2023/04/04 3:15 p.m.43 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS7.6AI score0.00308EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/04 3:15 p.m.8 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS5.8AI score0.00308EPSS
SaveExploits1References1
Prion
Prion
added 2023/04/04 3:15 p.m.23 views

Code injection

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

4.4CVSS7.6AI score0.00308EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/04/04 3:15 p.m.37 views

CVE-2023-26991

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...

7.8CVSS7.1AI score0.00308EPSS
SaveExploits1References2
Rows per page
Query Builder