CVE-2018-7869

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack...

CVE-2018-7867

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack...

CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

CVE-2018-7876

CVE-2018-7876 is a memory exhaustion vulnerability in libming 0.4.8. The issue is in parseSWF_ACTIONRECORD (util/parser.c) and can cause a denial of service via a crafted SWF file. Connected documents confirm libming 0.4.8 is affected and that multiple advisories (Fedora/Mageia) reference fixes/p...

CVE-2018-7869

CVE-2018-7869 concerns libming 0.4.8, with a memory leak in the function dcinit (util/decompile.c) that leads to a denial of service. Documents consistently identify the affected component as libming 0.4.8 and the leakage in dcinit; no explicit exploitation details or patches are provided in the ...

CVE-2018-7866

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7870

CVE-2018-7870 concerns libming 0.4.8, where an invalid memory address dereference in getString (util/decompile.c) for CONSTANT16 data can cause a segmentation fault and application crash, leading to denial of service. Connected advisories confirm this affects the ming library and indicate that fi...

CVE-2018-7871

CVE-2018-7871 corresponds to a heap-based buffer over-read in libming 0.4.8. Specifically, the getName function in util/decompile.c handles CONSTANT16 data and, under crafted input, can cause a denial of service (and potentially other impacts) due to memory over-reads. The connected advisories co...

CVE-2018-7872

CVE-2018-7872 affects libming 0.4.8, where an invalid memory address dereference in getName for CONSTANT16 data causes a segmentation fault and application crash, leading to denial of service. Connected advisories (Mageia MGASA-2019-0137 and Fedora/Nessus OpenVAS entries) confirm this as part of ...

CVE-2018-7877

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

CVE-2018-7876

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWFACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file...

CVE-2018-7867

CVE-2018-7867 corresponds to a heap-based buffer overflow in libming 0.4.8, specifically in the getString function (util/decompile.c) during a RegisterNumber sprintf, leading to denial of service when given crafted input. The connected sources confirm this as part of a broader set of fixes for mi...

CVE-2018-7875

The CVE-2018-7875 issue affects libming 0.4.8, specifically the getString function in util/decompile.c when processing CONSTANT8 data. A crafted input can cause a heap-based buffer over-read and denial of service. Public advisories (e.g., Fedora update FEDORA-2019-4fdf19459d and Mageia MGASA-2019...

CVE-2018-7872

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7873

CVE-2018-7873 is a heap-based buffer overflow in libming 0.4.8 (getString in util/decompile.c for INTEGER data) that can cause denial of service. Public advisories confirm fixes were applied in later libming updates (e.g., ming 0.4.9) across Fedora, Mageia, and OSV records; affected packages were...

CVE-2018-7870

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7868

The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...

Memory Misreference Vulnerability in libming 'decompileIF' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileIF' function in the util/decompile.c file in libming 0.4.8 and earlier versions. A...

Heap Buffer Overflow Vulnerability in libming 'printDefineFont2' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'printDefineFont2' function in the util/listfdb.c file in libming 0.4.8 and earlier. An...

CVE-2018-6358

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file...