SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Paid content will be excluded from the download.

Download | Alert*

OVAL

CVE-2017-10976 -- swftools

ID: oval:org.secpod.oval:def:2000321	Date: (C)2019-06-02 (M)2021-10-28
Class: VULNERABILITY	Family: unix

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c.

Platform:

Debian 8.x

Debian 9.x

Product:

swftools

Reference:

CVE-2017-10976

CVE 1

CPE 3