Lucene search
Ubuntu.comUB:CVE-2023-37644HistoryJan 11, 2024 - 12:00 a.m.
CVE-2023-37644
2024-01-1100:00:00
ubuntu.com
ubuntu.com
12
swftools
memory-allocation
crafted document
png_read_chunk
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
High
EPSS
0
Percentile
12.7%
SWFTools 0.9.2 772e55a allows attackers to trigger a large
memory-allocation attempt via a crafted document, as demonstrated by
pdf2swf. This occurs in png_read_chunk in lib/png.c.
Related
nvd
nvd
CVE-2023-37644
2024-01-11 08:15:35
cvelist
cvelist
CVE-2023-37644
2024-01-11 00:00:00
cve
cve
CVE-2023-37644
2024-01-11 08:15:35
prion
prion
Design/Logic Flaw
2024-01-11 08:15:00
cnvd
cnvd
SWFTools Buffer Overflow Vulnerability
2024-01-16 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
High
EPSS
0
Percentile
12.7%
Related for UB:CVE-2023-37644