swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• https://github.com/keepinggg/poc/blob/main/poc_of_swfdump/poc
• https://github.com/matthiaskramm/swftools
• https://github.com/matthiaskramm/swftools/issues/197
• https://github.com/keepinggg/poc/tree/main/poc_of_swfdump