Логотип exploitDog
bind:CVE-2017-16794
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2017-16794

Количество 4

Количество 4

ubuntu логотип

CVE-2017-16794

около 8 лет назад

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2017-16794

около 8 лет назад

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2017-16794

около 8 лет назад

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-h775-pw5c-jvxx

больше 3 лет назад

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2017-16794

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.

CVSS3: 5.5
0%
Низкий
около 8 лет назад
nvd логотип
CVE-2017-16794

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.

CVSS3: 5.5
0%
Низкий
около 8 лет назад
debian логотип
CVE-2017-16794

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly ...

CVSS3: 5.5
0%
Низкий
около 8 лет назад
github логотип
GHSA-h775-pw5c-jvxx

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an erroneous png_load call that occurs because of incorrect integer data types in png2swf.

CVSS3: 5.5
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу