Diggingwei

**Name of the Vulnerable Software and Affected Versions** SWFTools version 0.9.2 **Description** A stack-buffer-underflow issue was found in the function `parseExpression` at `src/swfc.c:2602`. This issue can potentially lead to a denial of service. **Recommendations** For SWFTools version 0.9.2, as a temporary workaround, consider disabling the `parseExpression` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SWFTools version 0.9.2 **Description** A global-buffer-overflow was found in the function `countline` at `swf5compiler.flex:327`. It allows an attacker to cause code execution. **Recommendations** For SWFTools version 0.9.2, consider disabling the `countline` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SWFTools version 0.9.2 **Description** A heap-buffer-overflow was found in the function `swf5lex` at `lex.swf5.c:1321`. It allows an attacker to cause code execution. **Recommendations** For SWFTools version 0.9.2, consider disabling the `swf5lex` function as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** SWFTools version 0.9.2 **Description** A heap-use-after-free issue was found in the function input at lex.swf5.c:2620, allowing an attacker to cause denial of service. **Recommendations** For SWFTools version 0.9.2, consider disabling the function input at lex.swf5.c:2620 as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SWFTools version 0.9.2 **Description** A heap-use-after-free issue was found in the function `swf DeleteTag` at `rfxswf.c:1193`. This issue allows an attacker to cause code execution. **Recommendations** For SWFTools version 0.9.2, consider disabling the `swf DeleteTag` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.