6.8
CVSSv2

CVE-2017-11100

Published: 07/07/2017 Updated: 13/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 606
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

swftools swftools 0.9.2

Vendor Advisories

Debian Bug report logs - #871024 swftools: CVE-2017-11100 Package: src:swftools; Maintainer for src:swftools is Christian Welzel <gawain@camlannde>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 6 Aug 2017 18:24:01 UTC Severity: normal Tags: fixed-upstream, security, upstream Found in version sw ...