CVE-2017-7698

—

CVSS 3.0

7.8 high

EPSS

2%p75

Published

May 10, 2017 (May 10, 2017)

Modified

Jun 17, 2026

Description

A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf 3.02.

Vendors: swftools
Products: swftools
Weakness: CWE-416
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.