Address Access Exception in SWFTools Affects Document Processing
CVE-2017-1000174

5.5MEDIUM

Key Information:

Vendor

Swftools

Status
Swftools
Vendor
CVE Published:
3 October 2022

What is CVE-2017-1000174?

A vulnerability in SWFTools has been identified where an address access exception occurs in the swfdump component while processing SWF files. This flaw could potentially allow an attacker to exploit the application by manipulating SWF file data, leading to unintended behavior or crashes. Users should take precautionary measures to upgrade to secure versions and ensure safe handling of SWF files.

References

https://github.com/matthiaskramm/swftools/issues/21
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.