PT-2017-14565 · Swftools · Swftools

Ghost · Published 2017-11-12 · Updated 2019-10-03 · CVE-2017-16794

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2

Description The issue arises from the png load function in lib/png.c, which fails to properly validate the multiplication of width and bits-per-pixel values. This allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. The problem is demonstrated by an erroneous png load call due to incorrect integer data types in png2swf.

Recommendations For SWFTools version 0.9.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2017-16794

Affected Products

Swftools

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-16794 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-16794 · Security Note
• https://ubuntu.com/security/CVE-2017-16794 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-16794 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-16794 · Vendor Advisory
• https://github.com/matthiaskramm/swftools/issues/50 · Note