Candidate: CVE-2017-8400
PublicDate: 2017-05-01 19:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8400
 https://github.com/matthiaskramm/swftools/issues/13
Description:
 In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the
 function png_load() in lib/png.c:755. This issue can be triggered by a
 malformed PNG file that is mishandled by png2swf. Attackers could exploit
 this issue for DoS; it might cause arbitrary code execution.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]

Patches_swftools:
 upstream: https://github.com/matthiaskramm/swftools/commit/7139f3cf7c8bc576bea1dbd07c58ce1ad92b774a
upstream_swftools: released (0.9.2+git20130725-4.1)
precise_swftools: DNE
precise/esm_swftools: DNE
trusty_swftools: ignored (reached end-of-life)
trusty/esm_swftools: DNE (trusty was needed)
vivid/stable-phone-overlay_swftools: DNE
vivid/ubuntu-core_swftools: DNE
xenial_swftools: released (0.9.2+git20130725-4.1~build0.16.04.1)
yakkety_swftools: ignored (reached end-of-life)
zesty_swftools: ignored (reached end-of-life)
artful_swftools: not-affected (0.9.2+git20130725-4.1)
bionic_swftools: not-affected (0.9.2+git20130725-4.1)
cosmic_swftools: not-affected (0.9.2+git20130725-4.1)
disco_swftools: not-affected (0.9.2+git20130725-4.1)
devel_swftools: not-affected (0.9.2+git20130725-4.1)