CVE-2017-16794

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2

Description The issue arises from the png load function in lib/png.c, which fails to properly validate the multiplication of width and bits-per-pixel values. This allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. The problem is demonstrated by an erroneous png load call due to incorrect integer data types in png2swf.

Recommendations For SWFTools version 0.9.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.