CVE-2023-37644

Опубликовано: 11 янв. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.

Ссылки

https://github.com/matthiaskramm/swftools/issues/202
Exploit
Issue Tracking
Vendor Advisory
https://github.com/matthiaskramm/swftools/issues/202
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00094

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2023-37644

CVSS3: 5.5

ubuntu

около 2 лет назад

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.

CVE-2023-37644

CVSS3: 5.5

debian

около 2 лет назад

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allo ...

GHSA-6gfr-4r2m-wr5p

CVSS3: 6.5

github

около 2 лет назад

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.

EPSS

Процентиль: 27%

0.00094

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787