Lucene search

MitreCVE-2022-35094

HistorySep 23, 2022 - 6:15 p.m.

CVE-2022-35094

2022-09-2318:15:10

CWE-787

mitre

web.nvd.nist.gov

cve-2022-35094

swftools

heap-buffer overflow

dctstream

readhuffsym

dcthufftable

xpdf

stream

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.3%

JSON

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.

Affected configurations

Nvd

Node

swftoolsswftoolsMatch2021-12-16

VendorProductVersionCPE
swftoolsswftools2021-12-16cpe:/a:swftools:swftools:2021-12-16:::

Vendor	Product	Version	CPE
swftools	swftools	2021-12-16	cpe:/a:swftools:swftools:2021-12-16:::

References

github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35094.md

github.com/matthiaskramm/swftools/issues/182

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.3%

JSON

Related for CVE-2022-35094