Swfdec

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Swfdec records in CISA KEV

No Swfdec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Swfdec 2 records LOW

Records

2 records

TI-2008-03637 CVE-2008-3796 · GHSA-jq6m-2q84-m3m8

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.

LOW 27

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02234 Published 2008-08-27 No fix listed CWE-20

TI-2008-01761 CVE-2008-1834 · GHSA-rgj4-4q5m-c8q8

swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access…

LOW 22

swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attackers to read arbitrary files via a crafted Flash file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01129 Published 2008-04-16 No fix listed CWE-264

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0