Lucene search

MitreCVE-2022-35107

HistoryAug 16, 2022 - 9:15 p.m.

CVE-2022-35107

2022-08-1621:15:11

CWE-770

mitre

web.nvd.nist.gov

swftools

cve-2022-35107

stack overflow

vfprintf

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.9%

JSON

SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c.

Affected configurations

Nvd

Node

swftoolsswftoolsMatch-

VendorProductVersionCPE
swftoolsswftools-cpe:/a:swftools:swftools:-:::

Vendor	Product	Version	CPE
swftools	swftools	-	cpe:/a:swftools:swftools:-:::

References

github.com/matthiaskramm/swftools/issues/184

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.9%

JSON

Related for CVE-2022-35107