Summaryinfo

A vulnerability classified as problematic has been found in SWFTools 0.9.2. Affected is the function dict_do_lookup in the library swftools/lib/q.c. The manipulation leads to out-of-bounds. This vulnerability is traded as CVE-2024-22957. There is no exploit available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability was found in SWFTools 0.9.2 (Programming Tool Software). It has been rated as problematic. This issue affects the function dict_do_lookup in the library swftools/lib/q.c. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality. The summary by CVE is:

swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190.

The weakness was presented 01/19/2024 as 206. It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2024-22957 since 01/11/2024. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Programming Tool Software

Name

• SWFTools

Version

• 0.9.2

License

• open-source

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion