Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-16711HistoryNov 09, 2017 - 6:29 p.m.
CVE-2017-16711
2017-11-0918:29:00
Debian Security Bug Tracker
security-tracker.debian.org
10
EPSS
0.001
Percentile
28.0%
The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) because of extractDefinitions in lib/readers/swf.c and fill_line_bitmap in lib/devices/render.c, as demonstrated by swfrender.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | swftools | <= 0.9.2+git20130725-4.1 | swftools_0.9.2+git20130725-4.1_all.deb |
Related
cve
cve
CVE-2017-16711
2017-11-09 18:29:00
nvd
nvd
CVE-2017-16711
2017-11-09 18:29:00
cvelist
cvelist
CVE-2017-16711
2017-11-09 17:00:00
ubuntucve
ubuntucve
CVE-2017-16711
2017-11-09 00:00:00
prion
prion
Null pointer dereference
2017-11-09 18:29:00