SWFTools Multiple Integer Overflow Vulnerabilities

Bugtraq ID:	42433
Class:	Input Validation Error
CVE:	CVE-2010-1516
Remote:	Yes
Local:	No
Published:	Aug 13 2010 12:00AM
Updated:	Apr 18 2012 05:20PM
Credit:	Stefan Cornelius, Secunia Research.
Vulnerable:	SWFTools SWFTools 0.9.1 Gentoo Linux
Not Vulnerable:

SWFTools Multiple Integer Overflow Vulnerabilities

SWFTools is prone to multiple integer-overflow vulnerabilities because it fails to properly validate user-supplied input.

Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.

SWFTools 0.9.1 is vulnerable; other versions may also be affected.

SWFTools Multiple Integer Overflow Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SWFTools Multiple Integer Overflow Vulnerabilities

Solution:
Reportedly, updates are available in the Git repository but Symantec has not confirmed this information. Please contact the vendor for more information.

SWFTools Multiple Integer Overflow Vulnerabilities

References:

• Secunia Research: SWFTools Two Integer Overflow Vulnerabilities (Secunia Research)
  
• SWFTools Homepage (SWFTools)