PT-2018-18303

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory exhaustion issue was found in the parseSWF ACTIONRECORD function in util/parser.c, allowing remote attackers to cause a denial of service via a crafted file. Recommendations: For libming version...

CVE-2018-7873: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

CVE-2018-7870: NULL Pointer Dereference

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2018-18298

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getName function of util/decompile.c, specifically for CONSTANT16 data. This can be triggered by a crafted input, potentially leading to a denial ...

CVE-2018-7867: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack...

PT-2018-18299

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the getName function for CONSTANT16 data, causing a segmentation fault, application crash, and denial of service. Recommendations: For libming version 0.4.8,...

CVE-2018-7874: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2018-18297

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the getString function in util/decompile.c, specifically for CONSTANT16 data. This issue leads to a segmentation fault, causing the application to crash and...

CVE-2018-7871: Out-of-bounds Read

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7869: Missing Release of Resource after Effective Lifetime

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack...

CVE-2018-7866: NULL Pointer Dereference

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2018-18295

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getName function of util/decompile.c for CONSTANT8 data. This can be triggered by a crafted input, potentially leading to a denial of service...

PT-2018-18302

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getString function of util/decompile.c for CONSTANT8 data. This can be triggered by a crafted input, leading to a denial of service attack...

PT-2018-18304

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A heap-based buffer overflow exists in the getString function of util/decompile.c for DOUBLE data. This can be triggered by a crafted input, leading to a denial of service attack. Recommendations: For libmin...

PT-2018-18301

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the strlenext function within util/decompile.c of libming, leading to a segmentation fault, application crash, and denial of service. Recommendations: For...

CVE-2018-7875: Out-of-bounds Read

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7876: Uncontrolled Resource Consumption

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWFACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file...

CVE-2018-7872: NULL Pointer Dereference

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Heap Buffer Overflow Vulnerability in libming 'printDefineFont2' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'printDefineFont2' function in the util/listfdb.c file in libming 0.4.8 and earlier. An...

Memory Misreference Vulnerability in libming 'decompileIF' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileIF' function in the util/decompile.c file in libming 0.4.8 and earlier versions. A...