First published: Mon Sep 20 2021(Updated: )
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::~GString() located in GString.cc. It allows an attacker to cause Denial of Service.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SWFTools | <=2020-07-10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-39559 is classified as a Denial of Service vulnerability.
To mitigate CVE-2021-39559, update SWFTools to a version released after 2020-07-10.
CVE-2021-39559 is caused by a NULL pointer dereference in the GString destructor.
SWFTools versions up to and including 2020-07-10 are affected by CVE-2021-39559.
Yes, an attacker can exploit CVE-2021-39559 to cause Denial of Service remotely.