CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755

published May 1, 2017

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02101 · 81.5th percentile
Published
2017-05-01T19:00Z
EPSS history
Timeline
  • 01 MAY 19:00Z
    In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755
    cvelistv5