Lucene search

MitreCVE-2023-37644

HistoryJan 11, 2024 - 8:15 a.m.

CVE-2023-37644

2024-01-1108:15:35

CWE-787

mitre

web.nvd.nist.gov

cve-2023-37644

swftools

memory-allocation

vulnerability

pdf2swf

png_read_chunk

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

Percentile

12.7%

JSON

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.

Affected configurations

Nvd

Node

swftoolsswftoolsMatch0.9.2

VendorProductVersionCPE
swftoolsswftools0.9.2cpe:/a:swftools:swftools:0.9.2:::

Vendor	Product	Version	CPE
swftools	swftools	0.9.2	cpe:/a:swftools:swftools:0.9.2:::

References

github.com/matthiaskramm/swftools/issues/202

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

Percentile

12.7%

JSON

Related for CVE-2023-37644