swftools 代码问题漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. swftools 2020-12-22 and earlier versions are vulnerable to a null pointer dereference, which stems from the presence of a NULL pointer dereference in the function traitsparse located in abc.c. An attacker could exploit...

CVE-2021-42204

The CVE-2021-42204 entry affects swftools up to 2020-12-22. The underlying flaw is a heap-buffer-overflow in the function swf_GetBits() within rfxswf.c, which can allow code execution. The connected documents confirm the same vulnerability description across multiple advisories, but do not specif...

CVE-2021-42204

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause code execution...

CVE-2021-42204

Removed by vendor...

CVE-2021-42203

CVE-2021-42203 affects swftools up to 2020-12-22. It involves a heap-use-after-free in swf_FontExtract_DefineTextCallback() located in swftext.c that allows an attacker to cause code execution. The vulnerability details come from multiple sources (NVD/NASS, CNVD, OSV, Debian Ubuntu trackers); exp...

CVE-2021-42203

An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

CVE-2021-42203

Removed by vendor...

CVE-2021-42202

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfDeleteFilter located in swffilter.c. It allows an attacker to cause Denial of Service...

CVE-2021-42202

Swftools (up to 20201222) contains a NULL pointer dereference in swf_DeleteFilter() within swffilter.c, which can be exploited to cause a Denial of Service. The issue is documented under CVE-2021-42202 and is corroborated by multiple connected sources (CNVD, OSV, CNVD-2022-62216, NVD, etc.). Affe...

CVE-2021-42202

Removed by vendor...

CVE-2021-42201

CVE-2021-42201 (swftools) : A heap-buffer-overflow in swf_GetD64() in rfxswf.c (affecting swftools up to 20201222) allows an attacker to cause code execution. Connected sources confirm the vulnerable function and general impact, but do not provide patch details. No explicit exploitation status is...

CVE-2021-42201

An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swfGetD64 located in rfxswf.c. It allows an attacker to cause code execution...

CVE-2021-42201

Removed by vendor...

CVE-2021-42200

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main located in swfdump.c. It allows an attacker to cause Denial of Service...

CVE-2021-42200

CVE-2021-42200 concerns swftools up to 20201222, where a NULL pointer dereference in the function main() of swfdump.c allows a Denial of Service. The vulnerability affects the swftools suite as described in multiple sources (e.g., NVD entry). Impact is a crash/DoS, with CVSS details indicating me...

CVE-2021-42200

Removed by vendor...

CVE-2021-42199

CVE-2021-42199 affects swftools: a heap buffer overflow in function swf_FontExtract_DefineTextCallback() (swftext.c) can lead to code execution. Impact per sources is high (CVSS 3.1: LOCAL, privileged/USER interaction may be required; confidentiality, integrity, and availability can be affected)....

CVE-2021-42199

An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

CVE-2021-42199

Removed by vendor...

CVE-2021-42198

The CVE-2021-42198 vulnerability is a NULL pointer dereference in swf_GetBits() within rfxswf.c of swftools up to 20201222, enabling Denial of Service. Connected documents reiterate the same issue without providing concrete remediation steps or patched versions. No exploit details or in-the-wild ...