[SECURITY] [DLA 1133-1] ming security update

Package : ming Version : 1:0.4.4-1.1+deb7u4 CVE ID : CVE-2017-11704 CVE-2017-11728 CVE-2017-11729 CVE-2017-11730 CVE-2017-11731 CVE-2017-11734 Multiple vulnerabilities have been discovered in Ming: CVE-2017-11704 Heap-based buffer over-read in the function decompileIF in util/decompile.c in Ming ...

Multiple Reflective Cross-Site Scripting Vulnerabilities in Treehole Outbound Linking System

Treehole external chain system is a free and open source PHP external chain network disk system, support for seven cattle, local, remote three kinds of storage methods, support for multi-user system. TreeHole Outbound Linking System '\content\common\vplayer.php' and '\views\error.php' files have...

Ming 'parseSWF_SHAPEWITHSTYLE' function memory leak vulnerability

Ming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A memory leak vulnerability exists in the 'parseSWFSHAPEWITHSTYLE' function in the util/parser.c file in Ming version 0.4.8. An attacker can exploit this vulnerability to cause a denial of servic...

Ming 'parseSWF_DOACTION' function memory leak vulnerability

Ming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A memory leak vulnerability exists in the 'parseSWFDOACTION' function in the util/parser.c file in Ming version 0.4.8. An attacker can exploit this vulnerability to cause a denial of service with...

Ming 'decompileIF' function heap buffer out-of-bounds read vulnerability

Ming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A heap buffer out-of-bounds read vulnerability exists in the 'decompileIF' function of the util/decompile.c file in Ming version 0.4.8. An attacker can exploit this vulnerability to cause a denia...

Heap overflow

A heap-based buffer over-read was found in the function OpCode called from decompileSETMEMBER in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11734

A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11732

A heap-based buffer overflow vulnerability was found in the function dcputs called from decompileIMPLEMENTS in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

Heap overflow

A heap-based buffer overflow vulnerability was found in the function dcputs called from decompileIMPLEMENTS in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

Memory corruption

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-11730

A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11729

A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11728

A heap-based buffer over-read was found in the function OpCode called from decompileSETMEMBER in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11730

A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

Heap overflow

A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11733

A null pointer dereference vulnerability was found in the function stackswap called from decompileSTACKSWAP in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

Heap overflow

A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11728

A heap-based buffer over-read was found in the function OpCode called from decompileSETMEMBER in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11732

A heap-based buffer overflow vulnerability was found in the function dcputs called from decompileIMPLEMENTS in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...