CVE-2008-3796 Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| swfdec | = 0.6.0 | No fix listed |
| swfdec | = 0.6.2 | No fix listed |
| swfdec | = 0.6.4 | No fix listed |
| swfdec | = 0.6.6 | No fix listed |
References
- [swfdec] 20080729 Swfdec 0.6.8 released mailing-list patch
- SUSE-SR:2009:004 vendor-advisory
- [oss-security] 20080819 swfdec 0.6.8 stable update mailing-list
- [oss-security] 20080819 Re: swfdec 0.6.8 stable update mailing-list
- swfdec-jpegimage-dos(44746) vdb-entry