UBUNTU-CVE-2016-9829

Heap-based buffer overflow in the parseSWFDEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

CVE-2016-9827

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

Design/Logic Flaw

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

UBUNTU-CVE-2016-9827

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

CVE-2016-9829: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the parseSWFDEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

CVE-2016-9828: NULL Pointer Dereference

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

CVE-2016-9827: Improper Restriction of Operations within the Bounds of a Memory Buffer

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

CVE-2016-9831

CVE-2016-9831 describes a heap-based buffer overflow in the parseSWF_RGBA function of parser.c in the listswf tool from libming 0.4.7. The vulnerability enables remote attackers to trigger unspecified impact via a crafted SWF file. Related advisories show that this issue is tied to multiple CVEs ...

CVE-2016-9831

Heap-based buffer overflow in the parseSWFRGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

CVE-2016-9828

CVE-2016-9828 affects the libming project (version 0.4.7) via the listswf tool. The vulnerability is in the dumpBuffer function (read.c) and allows a crafted SWF file to trigger a denial of service through a NULL pointer dereference. The provided connected documents confirm the affected component...

CVE-2016-9827

CVE-2016-9827 affects the Ming library (libming) up to version 0.4.7, where the _iprintf function in outputtxt.c used by the listswf tool can cause a denial of service through a crafted SWF file due to a buffer over-read. Connected advisories confirm this issue with Ming releases and note the vul...

CVE-2016-9827

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

PT-2017-10365

Name of the Vulnerable Software and Affected Versions libming version 0.4.7 Description The issue is related to a heap-based buffer overflow in the parseSWF RGBA function, located in parser.c in the listswf tool. This can be triggered by remote attackers using a crafted SWF file, potentially...

PT-2017-10363

Name of the Vulnerable Software and Affected Versions libming version 0.4.7 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted SWF file. This is due to a problem in the dumpBuffer function in read.c in the...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2993)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2994)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Type Confusion (APSB17-04: CVE-2017-2995)

A type confusion vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an affected...