CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11730

A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11733

A null pointer dereference vulnerability was found in the function stackswap called from decompileSTACKSWAP in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11734

A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11729

CVE-2017-11729 is a vulnerability in Ming 0.4.8 where a heap-based buffer over-read occurs in the OpCode path (util/decompile.c), triggered when processing crafted SWF files via decompileINCR_DECR. This can lead to a denial of service. Several connected advisories (GLSA-201904-24, Fedora advisori...