exploitDog

CVE-2022-35094

Опубликовано: 23 сент. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.

Ссылки

https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35094.md
Exploit
Third Party Advisory
https://github.com/matthiaskramm/swftools/issues/182
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Cvjark/Poc/blob/main/swftools/pdf2swf/CVE-2022-35094.md
Exploit
Third Party Advisory
https://github.com/matthiaskramm/swftools/issues/182
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:swftools:swftools:2021-12-16:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00413

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

CWE-787

Связанные уязвимости

CVE-2022-35094

CVSS3: 5.5

ubuntu

почти 4 года назад

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.

CVE-2022-35094

CVSS3: 5.5

debian

почти 4 года назад

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overf ...

GHSA-4vvq-7gfj-3jv6

CVSS3: 5.5

github

почти 4 года назад

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.

EPSS

Процентиль: 35%

0.00413

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

CWE-787