PT-2017-10871 · Swftools · Swftools

Lcatro · Published 2017-11-17 · Updated 2017-11-27 · CVE-2017-1000174

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SWFTools (affected versions not specified)

Description An address access exception was found in the swfdump function swf GetBits().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-1000174

Affected Products

Swftools

References · 5

• https://ubuntu.com/security/CVE-2017-1000174 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-1000174 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000174 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000174 · Vendor Advisory
• https://github.com/matthiaskramm/swftools/issues/21 · Note