Skip to content
OpenAdvisories
Unscored CVE-2017-11097 EUVD-2017-2734GHSA-23j8-j8rc-c9hw

When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c.

Published Jul 7, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Package: swftools Ecosystem: Ubuntu

Description

When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS swftools No fix yet —
Ubuntu 16.04 LTS swftools No fix yet —

References