CVE-2018-7877

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

CVE-2018-7871

CVE-2018-7871 corresponds to a heap-based buffer over-read in libming 0.4.8. Specifically, the getName function in util/decompile.c handles CONSTANT16 data and, under crafted input, can cause a denial of service (and potentially other impacts) due to memory over-reads. The connected advisories co...

CVE-2018-7869

CVE-2018-7869 concerns libming 0.4.8, with a memory leak in the function dcinit (util/decompile.c) that leads to a denial of service. Documents consistently identify the affected component as libming 0.4.8 and the leakage in dcinit; no explicit exploitation details or patches are provided in the ...

CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

CVE-2018-7866

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7876

CVE-2018-7876 is a memory exhaustion vulnerability in libming 0.4.8. The issue is in parseSWF_ACTIONRECORD (util/parser.c) and can cause a denial of service via a crafted SWF file. Connected documents confirm libming 0.4.8 is affected and that multiple advisories (Fedora/Mageia) reference fixes/p...

CVE-2018-7870

CVE-2018-7870 concerns libming 0.4.8, where an invalid memory address dereference in getString (util/decompile.c) for CONSTANT16 data can cause a segmentation fault and application crash, leading to denial of service. Connected advisories confirm this affects the ming library and indicate that fi...

CVE-2018-7868

The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...

CVE-2018-7867

CVE-2018-7867 corresponds to a heap-based buffer overflow in libming 0.4.8, specifically in the getString function (util/decompile.c) during a RegisterNumber sprintf, leading to denial of service when given crafted input. The connected sources confirm this as part of a broader set of fixes for mi...

CVE-2018-7872

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7873

CVE-2018-7873 is a heap-based buffer overflow in libming 0.4.8 (getString in util/decompile.c for INTEGER data) that can cause denial of service. Public advisories confirm fixes were applied in later libming updates (e.g., ming 0.4.9) across Fedora, Mageia, and OSV records; affected packages were...

CVE-2018-7875

The CVE-2018-7875 issue affects libming 0.4.8, specifically the getString function in util/decompile.c when processing CONSTANT8 data. A crafted input can cause a heap-based buffer over-read and denial of service. Public advisories (e.g., Fedora update FEDORA-2019-4fdf19459d and Mageia MGASA-2019...

CVE-2018-7876

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWFACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file...

CVE-2018-7870

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Memory Misreference Vulnerability in libming 'decompileIF' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileIF' function in the util/decompile.c file in libming 0.4.8 and earlier versions. A...

Heap Buffer Overflow Vulnerability in libming 'printDefineFont2' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'printDefineFont2' function in the util/listfdb.c file in libming 0.4.8 and earlier. An...

CVE-2018-6359

The decompileIF function util/decompile.c in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file...

CVE-2018-6358

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file...

CVE-2018-6358

The printDefineFont2 function util/listfdb.c in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file...

UBUNTU-CVE-2018-6359

The decompileIF function util/decompile.c in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file...