Lucene search
HistoryJan 11, 2024 - 8:15 a.m.
CVE-2023-37644
swftools
vulnerability
png_read_chunk
memory-allocation
crafted document
pdf2swf
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0
Percentile
12.7%
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.
Affected configurations
Node
swftoolsswftoolsMatch0.9.2
Related
ubuntucve
ubuntucve
CVE-2023-37644
2024-01-11 00:00:00
cvelist
cvelist
CVE-2023-37644
2024-01-11 00:00:00
cve
cve
CVE-2023-37644
2024-01-11 08:15:35
prion
prion
Design/Logic Flaw
2024-01-11 08:15:00
cnvd
cnvd
SWFTools Buffer Overflow Vulnerability
2024-01-16 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0
Percentile
12.7%
Related for NVD:CVE-2023-37644