PT-2017-14565 · Swftools · Swftools

Ghost · Publicado 2017-11-12 · Atualizado 2019-10-03 · CVE-2017-16794

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2

Description The issue arises from the png load function in lib/png.c, which fails to properly validate the multiplication of width and bits-per-pixel values. This allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. The problem is demonstrated by an erroneous png load call due to incorrect integer data types in png2swf.

Recommendations For SWFTools version 0.9.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2017-16794

Produtos afetados

Swftools

Referências · 6

• https://github.com/matthiaskramm/swftools/issues/50 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-16794 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2017-16794 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-16794 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-16794 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-16794 · Aviso do Fabricante