Heap overflow

Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...

CVE-2019-12982

Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...

CVE-2019-12982

Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...

CVE-2019-12982

Ming (aka libming) 0.4.8 contains a heap buffer overflow and an underflow in the decompileCAST function (util/decompile.c in libutil.a). Across multiple sources (including Red Hat, NVD, CNVD, OSV, UBUNTU/NASL) the vulnerability can be exploited by a crafted SWF file to trigger a denial of service...

CVE-2019-12982

Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...

CVE-2019-12980

In Ming aka libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the SWFInputreadSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

CVE-2019-12980

In Ming aka libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the SWFInputreadSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

PT-2019-13065

Name of the Vulnerable Software and Affected Versions Ming aka libming version 0.4.8 Description The issue is caused by an integer overflow due to an out-of-range left shift in the SWFInput readSBits function. This could allow remote attackers to cause a denial-of-service via a crafted swf file...

CVE-2019-12980: Integer Overflow or Wraparound

In Ming aka libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the SWFInputreadSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

PT-2019-13067

Name of the Vulnerable Software and Affected Versions Ming aka libming version 0.4.8 Description The issue is related to a heap buffer overflow and underflow in the decompileCAST function, located in util/decompile.c in libutil.a. This could allow remote attackers to cause a denial of service by...

CVE-2019-12982: Improper Restriction of Operations within the Bounds of a Memory Buffer

Ming aka libming 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file...

FLASHMINGO - Automatic Analysis Of SWF Files Based On Some Heuristics

Automatic Analysis Of SWF Files Based On Some Heuristics. Extensible Via Plugins. Install Install the Python 2.7 packages listed in requirements.txt. You can use the following command: pip install -r requirements.txt If you want to use the decompilation functionality you need to install Jython...

FLASHMINGO: The FireEye Open Source Automatic Analysis Tool for Flash

Adobe Flash is one of the most exploited software components of the last decade. Its complexity and ubiquity make it an obvious target for attackers. Public sources list more than one thousand CVEs being assigned to the Flash Player alone since 2005. Almost nine hundred of these vulnerabilities...

Updated ming packages fix security vulnerability

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file. CVE-2018-6358 There is a heap-based buffer overflow in the getString...

CVE-2019-10276

Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...

PT-2019-11678

Name of the Vulnerable Software and Affected Versions Western Bridge Cobub Razor version 0.8.0 Description The issue concerns a file upload vulnerability. This vulnerability can be exploited via the "web/assets/swf/uploadify.php" URI. An example of exploitation involves uploading a .php file with...

Microsoft Edge - Flash click2play Bypass with CObjectElement::FinalCreateObject

Attached is a PoC file that bypasses Flash click2play in Microsoft Edge. This was tested on Windows 10 64bit v 1809 with the latest patches applied. The PoC currently loads a swf from wwwimages.adobe.com screenshot attached, but can load a swf from any domain and also the PoC itself can be hosted...

[SECURITY] Fedora 29 Update: ming-0.4.9-0.1.20181112git5009802.fc29

Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...

Mail.ru: Cross site scripting vulnerability in JW Player SWF

Flash-based XSS in aw-xbox.my.com...

CVE-2019-7582

The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...