Lucene search

MitreCVE-2022-35091

HistorySep 23, 2022 - 6:15 p.m.

CVE-2022-35091

2022-09-2318:15:10

CWE-697

mitre

web.nvd.nist.gov

cve-2022-35091

swftools

fpe

dctstream

readmcurow

xpdf

stream

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

34.9%

JSON

SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow()

Affected configurations

Nvd

Node

swftoolsswftoolsMatch2021-12-16

VendorProductVersionCPE
swftoolsswftools2021-12-16cpe:/a:swftools:swftools:2021-12-16:::

Vendor	Product	Version	CPE
swftools	swftools	2021-12-16	cpe:/a:swftools:swftools:2021-12-16:::

References

github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35091.md

github.com/matthiaskramm/swftools/issues/182

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

34.9%

JSON

Related for CVE-2022-35091