CVE-2017-11100

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2

Description The issue occurs when SWFTools processes a crafted file in swfextract, leading to a NULL Pointer Dereference in the swf FoldSprite() function in lib/rxfswf.c.

Recommendations For SWFTools version 0.9.2, consider avoiding the use of the swf FoldSprite() function until a patch is available. As a temporary workaround, restrict the processing of crafted files in swfextract to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.