CVE-2017-11731

CVE-2017-11731 affects Ming 0.4.8 (libming) and is an invalid memory read in OpCode (used by isLogicalOp and decompileIF in util/decompile.c) that enables denial of service via a crafted file. Connected sources enumerate multiple Ming-related CVEs in 0.4.8 and document memory/buffer over-read and...

CVE-2017-11733

CVE-2017-11733 : Ming 0.4.8 is affected by a null pointer dereference in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c, leading to denial of service when processing a crafted file. Public advisories reference Ming/Fedora/Gentoo/OpenVAS entries; no explicit exploit de...

CVE-2017-11728

A heap-based buffer over-read was found in the function OpCode called from decompileSETMEMBER in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11732

A heap-based buffer overflow vulnerability was found in the function dcputs called from decompileIMPLEMENTS in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11734

A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11730

A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11705

A memory leak was found in the function parseSWFSHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11703

A memory leak vulnerability was found in the function parseSWFDOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

Heap overflow

A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-11704

A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

Memory corruption

A memory leak was found in the function parseSWFSHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11704

A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11703

A memory leak vulnerability was found in the function parseSWFDOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-11703

A memory leak vulnerability was found in the function parseSWFDOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11704

A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-11705

A memory leak was found in the function parseSWFSHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11705

A memory leak was found in the function parseSWFSHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11703

A memory leak vulnerability was found in the function parseSWFDOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11704

A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11703

A memory leak vulnerability was found in the function parseSWFDOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...