CVE-2010-1516 Integer overflow in n/a

Critical 9.3 Published 17 Aug 2010 Updated 7 Aug 2024

Remote attackers can execute arbitrary code by tricking users into opening crafted PNG or JPEG files processed by SWFTools.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2010-1516?

CVE-2010-1516 is a critical vulnerability in Swftools Swftools, published on 17 Aug 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the getPNG function in lib/png.c; or (2) a crafted JPEG file, related to the jpeg_load function in lib/jpeg.c.

Weakness: CWE-189

Which versions are affected by CVE-2010-1516?

It affects 1 product.

Products include Swftools Swftools.

How do I fix CVE-2010-1516?

No fix has been published for CVE-2010-1516 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-1516 being exploited?

There is no known exploitation of CVE-2010-1516 in the wild and no public exploit code.

All Swftools Swftools vulnerabilities

Sources

Also known as GHSA-46vg-8qj8-j3fp.