EUVD-2016-10628

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-9831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the parseSWFRGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via ...

CVE-2016-9827

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

Null pointer dereference

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

Design/Logic Flaw

The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...

UBUNTU-CVE-2016-9829

Heap-based buffer overflow in the parseSWFDEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file...

UBUNTU-CVE-2016-9828

The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SWF file...

CVE-2016-9827

CVE-2016-9827 affects the Ming library (libming) up to version 0.4.7, where the _iprintf function in outputtxt.c used by the listswf tool can cause a denial of service through a crafted SWF file due to a buffer over-read. Connected advisories confirm this issue with Ming releases and note the vul...