First published: Mon Sep 20 2021(Updated: )
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBoundingBox() located in swfshape.c. It allows an attacker to cause Denial of Service.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SWFTools | <=2020-07-10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-39591 has a severity level that can lead to a Denial of Service due to a NULL pointer dereference.
To mitigate CVE-2021-39591, users should upgrade to a version of SWFTools released after 2020-07-10.
CVE-2021-39591 affects SWFTools versions up to and including 2020-07-10.
CVE-2021-39591 is a NULL pointer dereference vulnerability that leads to Denial of Service.
Yes, CVE-2021-39591 can potentially be exploited remotely by an attacker to cause service disruption.