Vulnerabilities > Swftools
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-11-12 | CVE-2017-16793 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Swftools 0.9.2 The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (incorrect malloc and heap-based buffer overflow) or possibly have unspecified other impact via a crafted file. | 7.8 |
| 2017-11-09 | CVE-2017-16711 | NULL Pointer Dereference vulnerability in Swftools 0.9.2 The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) because of extractDefinitions in lib/readers/swf.c and fill_line_bitmap in lib/devices/render.c, as demonstrated by swfrender. | 5.5 |
| 2017-07-07 | CVE-2017-11101 | NULL Pointer Dereference vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c. | 8.8 |
| 2017-07-07 | CVE-2017-11100 | NULL Pointer Dereference vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c. | 8.8 |
| 2017-07-07 | CVE-2017-11099 | Improper Input Validation vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c. | 8.8 |
| 2017-07-07 | CVE-2017-11098 | Improper Input Validation vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c. | 8.8 |
| 2017-07-07 | CVE-2017-11097 | NULL Pointer Dereference vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c. | 8.8 |
| 2017-07-07 | CVE-2017-11096 | NULL Pointer Dereference vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modules/swffilter.c. | 8.8 |
| 2017-07-06 | CVE-2017-10976 | Out-of-bounds Read vulnerability in Swftools 0.9.2 When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c. | 7.5 |
| 2017-07-05 | CVE-2017-9927 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Swftools 201304091007 In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to a "Read Access Violation starting at image00000000_00400000+0x000000000001b5fe." | 8.8 |