First published: Mon Sep 20 2021(Updated: )
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parse_metadata() located in abc.c. It allows an attacker to cause Denial of Service.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SWFTools | <=2020-07-10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-39589 has a severity rating that suggests it can lead to Denial of Service.
To fix CVE-2021-39589, update your version of SWFTools to a release later than 2020-07-10.
The impact of CVE-2021-39589 is primarily a Denial of Service, causing the application to crash.
CVE-2021-39589 is found in SWFTools versions up to and including 2020-07-10.
An attacker can exploit CVE-2021-39589 by triggering a NULL pointer dereference in the parse_metadata() function.