CVE-2017-16711: SWFTools: NULL pointer dereference

Related Vulnerabilities: CVE-2017-16711  

Debian Bug report logs - #881390
CVE-2017-16711: SWFTools: NULL pointer dereference

version graph

Reported by: Henri Salo <henri@nerv.fi>

Date: Sat, 11 Nov 2017 09:00:02 UTC

Severity: important

Tags: security, upstream

Found in version swftools/0.9.2+git20130725-4.1

Forwarded to https://github.com/matthiaskramm/swftools/issues/46

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Christian Welzel <gawain@camlann.de>:
Bug#881390; Package swftools. (Sat, 11 Nov 2017 09:00:05 GMT) (full text, mbox, link).


Acknowledgement sent to Henri Salo <henri@nerv.fi>:
New Bug report received and forwarded. Copy sent to Christian Welzel <gawain@camlann.de>. (Sat, 11 Nov 2017 09:00:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Henri Salo <henri@nerv.fi>
To: submit@bugs.debian.org
Subject: CVE-2017-16711: SWFTools: NULL pointer dereference
Date: Sat, 11 Nov 2017 10:55:45 +0200
[Message part 1 (text/plain, inline)]
Package: swftools
Version: 0.9.2+git20130725-4.1
Severity: important
Tags: security, upstream

Upstream bug report: https://github.com/matthiaskramm/swftools/issues/46

CVE description: The swf_DefineLosslessBitsTagToImage function in
lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which
allows remote attackers to cause a denial of service (NULL pointer dereference
and application crash) because of extractDefinitions in lib/readers/swf.c and
fill_line_bitmap in lib/devices/render.c, as demonstrated by swfrender.

-- 
Henri Salo
[signature.asc (application/pgp-signature, inline)]

Set Bug forwarded-to-address to 'https://github.com/matthiaskramm/swftools/issues/46'. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Sat, 11 Nov 2017 09:06:03 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 14:52:37 2019; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.