Vulnerabilities > Swftools > Swftools > 0.9.2

DATE CVE VULNERABILITY TITLE RISK
2021-09-20 CVE-2021-39592 NULL Pointer Dereference vulnerability in Swftools
An issue was discovered in swftools through 20200710.
network
swftools CWE-476
4.3
2021-09-20 CVE-2021-39593 NULL Pointer Dereference vulnerability in Swftools
An issue was discovered in swftools through 20200710.
network
swftools CWE-476
4.3
2021-09-20 CVE-2021-39594 NULL Pointer Dereference vulnerability in Swftools
Other An issue was discovered in swftools through 20200710.
network
swftools CWE-476
4.3
2021-09-20 CVE-2021-39595 Out-of-bounds Write vulnerability in Swftools
An issue was discovered in swftools through 20200710.
network
swftools CWE-787
6.8
2021-09-20 CVE-2021-39596 NULL Pointer Dereference vulnerability in Swftools
An issue was discovered in swftools through 20200710.
network
swftools CWE-476
4.3
2021-09-20 CVE-2021-39597 NULL Pointer Dereference vulnerability in Swftools
An issue was discovered in swftools through 20200710.
network
swftools CWE-476
4.3
2021-09-20 CVE-2021-39598 NULL Pointer Dereference vulnerability in Swftools
An issue was discovered in swftools through 20200710.
network
swftools CWE-476
4.3
2018-07-09 CVE-2017-16890 Divide By Zero vulnerability in Swftools 0.9.2
SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero.
network
swftools CWE-369
4.3
2017-11-17 CVE-2017-16868 NULL Pointer Dereference vulnerability in Swftools 0.9.2
In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service (integer overflow and NULL pointer dereference) via a crafted WAV file.
network
swftools CWE-476
4.3
2017-11-12 CVE-2017-16797 Integer Overflow or Wraparound vulnerability in Swftools 0.9.2
In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file.
network
swftools CWE-190
6.8