Lucene search

MitreCVE-2022-35093

HistorySep 23, 2022 - 6:15 p.m.

CVE-2022-35093

2022-09-2318:15:10

CWE-787

mitre

web.nvd.nist.gov

nvd

cve-2022-35093

swftools

buffer overflow

dctstream

transformdataunit

xpdf

stream.cc

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.3%

JSON

SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.

Affected configurations

Nvd

Node

swftoolsswftoolsMatch2021-12-16

VendorProductVersionCPE
swftoolsswftools2021-12-16cpe:/a:swftools:swftools:2021-12-16:::

Vendor	Product	Version	CPE
swftools	swftools	2021-12-16	cpe:/a:swftools:swftools:2021-12-16:::

References

github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35093.md

github.com/matthiaskramm/swftools/issues/182

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.3%

JSON

Related for CVE-2022-35093