Vulnerabilities (CVE)

Filtered by vendor Swftools Subscribe
Filtered by product Swftools
Total 126 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-39579 1 Swftools 1 Swftools 2021-09-22 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() located in q.c. It allows an attacker to cause code Execution.
CVE-2021-39582 1 Swftools 1 Swftools 2021-09-22 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject() located in swfobject.c. It allows an attacker to cause code Execution.
CVE-2021-39585 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-39584 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespace_set_hash() located in pool.c. It allows an attacker to cause Denial of Service.
CVE-2021-39583 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_string2() located in pool.c. It allows an attacker to cause Denial of Service.
CVE-2021-39587 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpABC() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-39588 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_ReadABC() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-39589 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parse_metadata() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-39591 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBoundingBox() located in swfshape.c. It allows an attacker to cause Denial of Service.
CVE-2021-39590 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function params_dump() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-39592 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_uint() located in pool.c. It allows an attacker to cause Denial of Service.
CVE-2021-39593 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_FontExtract_DefineFontInfo() located in swftext.c. It allows an attacker to cause Denial of Service.
CVE-2021-39594 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
Other An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function updateusage() located in swftext.c. It allows an attacker to cause Denial of Service.
CVE-2021-39595 1 Swftools 1 Swftools 2021-09-22 6.8 MEDIUM 7.8 HIGH
An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfx_alloc() located in mem.c. It allows an attacker to cause code Execution.
CVE-2021-39596 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_parse() located in code.c. It allows an attacker to cause Denial of Service.
CVE-2021-39597 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_dump2() located in code.c. It allows an attacker to cause Denial of Service.
CVE-2021-39598 1 Swftools 1 Swftools 2021-09-22 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function callcode() located in code.c. It allows an attacker to cause Denial of Service.
CVE-2017-16797 1 Swftools 1 Swftools 2019-10-03 6.8 MEDIUM 7.8 HIGH
In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file.
CVE-2017-16794 1 Swftools 1 Swftools 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.
CVE-2017-1000182 1 Swftools 1 Swftools 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In SWFTools, a memory leak was found in wav2swf.