Description
Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.
References (5)
Core 5
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2008/08/19/3
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44746
Patch mailing-list
x_refsource_mlist
http://lists.freedesktop.org/archives/swfdec/2008-July/001801.html
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2008/08/19/2
Scores
EPSS
0.0223
EPSS Percentile
80.7%
Details
CWE
CWE-20
Status
published
Products (4)
swfdec/swfdec
0.6.0
swfdec/swfdec
0.6.2
swfdec/swfdec
0.6.4
swfdec/swfdec
0.6.6
Published
Aug 27, 2008
Tracked Since
Feb 18, 2026