Invalid Memory Address Dereference Vulnerability in libming 'getString' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'getString' function in the util/decompile.c file in libming version 0.4.8. An attacker can exploit thi...

libming 'getString' function heap buffer overflow vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A heap buffer overflow vulnerability exists in the 'getString' function of the util/decompile.c file in libming version 0.4.8. An attacker can exploit this vulnerability with specially crafted...

CVE-2018-7870

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

UBUNTU-CVE-2018-7877

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

UBUNTU-CVE-2018-7867

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack...

UBUNTU-CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

UBUNTU-CVE-2018-7870

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Heap overflow

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

CVE-2018-7870

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

UBUNTU-CVE-2018-7875

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7870

CVE-2018-7870 concerns libming 0.4.8, where an invalid memory address dereference in getString (util/decompile.c) for CONSTANT16 data can cause a segmentation fault and application crash, leading to denial of service. Connected advisories confirm this affects the ming library and indicate that fi...

CVE-2018-7875: Out-of-bounds Read

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7873: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

CVE-2018-7877: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

CVE-2018-7870: NULL Pointer Dereference

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7867: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack...

CVE-2002-2368: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to 1 the GetString function in proxy.c for the SOCKS5 module or 2 the HandleS4Connection function in proxy.c for the SOCKS4 modul...

CVE-2006-6393

Cross-site scripting XSS vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the InputFilter::getString function...

CVE-2006-6393

CVE-2006-6393 is an XSS vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier. The issue arises from InputFilter::getString, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Documented impact is client-side data/script integrity and potential user interact...