Heap Buffer Overflow in swftools Affects Code Execution
CVE-2021-39569

7.8HIGH

Key Information:

Vendor

Swftools

Status
Swftools
Vendor
CVE Published:
20 September 2021

What is CVE-2021-39569?

A vulnerability identified in swftools through version 20200710 involves a heap buffer overflow in the OpAdvance() function found in swfaction.c. This flaw enables attackers to execute arbitrary code, potentially compromising system integrity and security. Users of affected versions are urged to review their installation and implement necessary updates to mitigate risks.

References

https://github.com/matthiaskramm/swftools/issues/114
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.