Lucene search

GoogleOSV:CVE-2021-31240

HistoryMay 09, 2023 - 4:15 p.m.

CVE-2021-31240

2023-05-0916:15:14

Google

osv.dev

libming

code execution

parseswf_importassets

local attacker

parser file

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file.

CPENameOperatorVersion
libmingeqming-0_3_beta2
libmingeqming-0_4_5
libmingeqming-0_4_0_beta4
libmingeqming-0_3_0
libmingeqming-0_4_6
libmingeqming-0_4_4
libmingeqming-0_4_3
libmingeqming-0_4_8
libmingeqming-0_4_0_beta5
libmingeqming-0_4_0_rc1

Name	Operator	Version
libming	eq	ming-0_3_beta2
libming	eq	ming-0_4_5
libming	eq	ming-0_4_0_beta4
libming	eq	ming-0_3_0
libming	eq	ming-0_4_6
libming	eq	ming-0_4_4
libming	eq	ming-0_4_3
libming	eq	ming-0_4_8
libming	eq	ming-0_4_0_beta5
libming	eq	ming-0_4_0_rc1

Rows per page:

1-10 of 131

References

github.com/libming/libming/issues/218

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:CVE-2021-31240