Lucene search

MitreCVE-2024-22955

HistoryJan 19, 2024 - 6:15 p.m.

CVE-2024-22955

2024-01-1918:15:09

CWE-787

mitre

web.nvd.nist.gov

127

cve-2024-22955

swftools

stack buffer underflow

vulnerability

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.5%

JSON

swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576.

Affected configurations

Nvd

Node

swftoolsswftoolsMatch0.9.2

VendorProductVersionCPE
swftoolsswftools0.9.2cpe:/a:swftools:swftools:0.9.2:::

Vendor	Product	Version	CPE
swftools	swftools	0.9.2	cpe:/a:swftools:swftools:0.9.2:::

References

github.com/matthiaskramm/swftools/issues/207

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.5%

JSON

Related for CVE-2024-22955