CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

UBUNTU-CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

PT-2018-2760

Name of the Vulnerable Software and Affected Versions Poppler version 0.72.0 Description The issue is related to insufficient input validation in the Poppler library, which can lead to a denial of service. Specifically, it involves the construction of invalid rich media annotation assets in the...

CVE-2018-9437

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

CVE-2018-9437: Out-of-bounds Read

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

Cross-Site Scripting (XSS)

angular-gettext is vulnerable to cross-site scripting. interpolationContext is passed to getString or getPlural functions in dist/angular-gettext.js and src/directive.js, which allows attackers to inject arbitrary Javascript code into a victim's browser when the attribute...

libming 'getString' function null pointer dereference vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'getString' function of the decompile.c file in libming version 0.4.8. A remote attacker can exploit th...

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

UBUNTU-CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-13250

CVE-2018-13250 affects libming 0.4.8, where a NULL pointer dereference in the getString function of decompile.c (related to decompileSTRINGCONCAT) allows remote attackers to cause a denial of service via a crafted SWF file. Public documents consistently describe the vulnerable code path and impac...

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

UBUNTU-CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

PT-2018-10410

Name of the Vulnerable Software and Affected Versions libming versions 0.4.8 and earlier Description The issue is related to the getString function in decompile.c, which mishandles cases where the header indicates a file size greater than the actual size. This can be exploited by remote attackers...

libming denial of service vulnerability (CNVD-2018-10325)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A security vulnerability exists in the 'getString' function of the decompile.c file in libming 0.4.8 and earlier versions, which stems from the program's failure to correctly handle a situatio...

CVE-2018-11226: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

Heap buffer overflow vulnerability in libming 'getString' function (CNVD-2018-05225)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'getString' function of the util/decompile.c file in libming version 0.4.8. An attacker can...