CVE-2023-27249

MediumCVSS 5.5

Published: 23/03/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

A heap buffer overflow vulnerability was discovered in swfdump version 0.9.2 in the function swf_GetPlaceObject at swfobject.c. This could lead to program crashes or potentially arbitrary code execution.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to full system compromise.

Recommendation

It is recommended to immediately update swfdump to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c.