Priority HIGH 82
SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01342 · Published 2022-09-20 · No fix listed CWE-416
Priority HIGH 82
SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01189 · Published 2022-09-20 · No fix listed CWE-787
Priority HIGH 73
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00518 · Published 2024-02-14 · No fix listed CWE-120
Priority HIGH 72
Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00713 · Published 2024-04-11 · No fix listed CWE-476
Priority HIGH 69
swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0035 · Published 2024-01-19 · No fix listed CWE-416
Priority HIGH 69
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00298 · Published 2024-01-19 · No fix listed CWE-416
Priority HIGH 69
A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00376 · Published 2024-01-19 · No fix listed CWE-416
Priority HIGH 69
A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00361 · Published 2024-01-19 · No fix listed CWE-787
Priority HIGH 69
A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00357 · Published 2024-01-19 · No fix listed CWE-120
Priority HIGH 69
A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2024-01-19 · No fix listed CWE-787
Priority HIGH 69
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swf_ReadSWF2 function in lib/rfxswf.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00311 · Published 2023-04-04 · No fix listed CWE-416
Priority HIGH 67
swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2024-01-19 · No fix listed CWE-787
Priority HIGH 67
swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00285 · Published 2024-01-19 · No fix listed CWE-787
Priority MEDIUM 61
swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00274 · Published 2024-03-05 · No fix listed CWE-125
Priority MEDIUM 58
swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c.
CVSS 3.1MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.00382 · Published 2024-03-05 · No fix listed CWE-119
Priority MEDIUM 58
swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00275 · Published 2024-03-05 · No fix listed CWE-416
Priority MEDIUM 58
swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00305 · Published 2024-01-19 · No fix listed CWE-125
Priority MEDIUM 58
A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00301 · Published 2024-01-19 · No fix listed CWE-416
Priority MEDIUM 58
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0027 · Published 2024-01-11 · No fix listed CWE-787
Priority MEDIUM 58
swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00323 · Published 2023-04-27 · No fix listed CWE-787
Priority MEDIUM 58
swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00366 · Published 2023-03-23 · No fix listed CWE-787
Priority MEDIUM 58
ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00288 · Published 2023-02-24 · No fix listed CWE-125
Priority MEDIUM 58
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert_gfxline at /gfxpoly/convert.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00385 · Published 2022-09-23 · No fix listed CWE-787
Priority MEDIUM 58
SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow()
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00587 · Published 2022-09-23 · No fix listed CWE-697
Priority MEDIUM 58
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_memintrinsics.cpp:.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00334 · Published 2022-09-20 · No fix listed CWE-787
Load more
THREATIST.IORead the docs