CVE-2017-16797 in SWFToolsالمعلومات

الملخص

بحسب MITRE

In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and application crash) or possibly have unspecified other impact via a crafted PNG file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

المصادر

Want to know what is going to be exploited?

We predict KEV entries!