Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the readString function when processing a manipulated DATA Submessage with DDS Security enabled. An attacker can cause remote process termination by sending a specially crafted SPDP packet that tampers wit...

Integer overflow

The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error...