CVEs-PoC/2017/CVE-2017-11100.md

CVE-2017-11100

Description

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c.

POC

Reference

• https://github.com/matthiaskramm/swftools/issues/27
• https://github.com/matthiaskramm/swftools/issues/27

Github

• https://github.com/andir/nixos-issue-db-example