CVE-2018-7875

The CVE-2018-7875 issue affects libming 0.4.8, specifically the getString function in util/decompile.c when processing CONSTANT8 data. A crafted input can cause a heap-based buffer over-read and denial of service. Public advisories (e.g., Fedora update FEDORA-2019-4fdf19459d and Mageia MGASA-2019...

CVE-2018-7868

The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...

CVE-2018-7867

CVE-2018-7867 corresponds to a heap-based buffer overflow in libming 0.4.8, specifically in the getString function (util/decompile.c) during a RegisterNumber sprintf, leading to denial of service when given crafted input. The connected sources confirm this as part of a broader set of fixes for mi...

CVE-2018-7873

CVE-2018-7873 is a heap-based buffer overflow in libming 0.4.8 (getString in util/decompile.c for INTEGER data) that can cause denial of service. Public advisories confirm fixes were applied in later libming updates (e.g., ming 0.4.9) across Fedora, Mageia, and OSV records; affected packages were...

CVE-2018-7876

CVE-2018-7876 is a memory exhaustion vulnerability in libming 0.4.8. The issue is in parseSWF_ACTIONRECORD (util/parser.c) and can cause a denial of service via a crafted SWF file. Connected documents confirm libming 0.4.8 is affected and that multiple advisories (Fedora/Mageia) reference fixes/p...

CVE-2018-7866

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7872

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7869

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack...

CVE-2018-7866

The CVE-2018-7866 issue affects libming 0.4.8, caused by a NULL pointer dereference in newVar3 in util/decompile.c, leading to segmentation fault and denial of service. Publicly documented fixes come from libming package updates (e.g., Fedora/Mageia advisories) that backport or release patched ve...

CVE-2018-7870

CVE-2018-7870 concerns libming 0.4.8, where an invalid memory address dereference in getString (util/decompile.c) for CONSTANT16 data can cause a segmentation fault and application crash, leading to denial of service. Connected advisories confirm this affects the ming library and indicate that fi...

CVE-2018-7874

The CVE-2018-7874 entry concerns an invalid memory address dereference in strlenext (util/decompile.c) of libming 0.4.8, causing a segmentation fault and a denial of service. The provided documents confirm the vulnerable component and the crash-inducing root cause but do not include details on af...

CVE-2018-7872

CVE-2018-7872 affects libming 0.4.8, where an invalid memory address dereference in getName for CONSTANT16 data causes a segmentation fault and application crash, leading to denial of service. Connected advisories (Mageia MGASA-2019-0137 and Fedora/Nessus OpenVAS entries) confirm this as part of ...

CVE-2018-7876

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWFACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file...

CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

Memory Misreference Vulnerability in libming 'decompileIF' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileIF' function in the util/decompile.c file in libming 0.4.8 and earlier versions. A...

Heap Buffer Overflow Vulnerability in libming 'printDefineFont2' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'printDefineFont2' function in the util/listfdb.c file in libming 0.4.8 and earlier. An...

Heap overflow

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file...

CVE-2018-6359

The decompileIF function util/decompile.c in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file...

CVE-2018-6358

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file...

CVE-2018-6359

The decompileIF function util/decompile.c in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file...