SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf.c.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/matthiaskramm/swftools/issues/181 | exploit third party advisory issue tracking |
https://github.com/Cvjark/Poc/blob/main/swftools/gif2swf/CVE-2022-35088.md | exploit third party advisory |