VDB
GCVE-110-MAGEIA-2017-245
GCVE-110-MAGEIA-2017-245
Advisory Published
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the
function png_load() in lib/png.c. This issue can be triggered by a
malformed PNG file that is mishandled by png2swf. Attackers could
exploit this issue for DoS; it might cause arbitrary code execution
(CVE-2017-8400).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | swftools | 0 (affected), 0.9.2-7.1.mga5 (unaffected) | — |
Aliases
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.