Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45720
HistoryMar 01, 2024 - 9:44 a.m.

Memory Leak

2024-03-0109:44:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
libming
vulnerability
memory leak
parseswf_definebutton
dos
heap memory
character
action
swf file

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

libming/libming is vulnerable to Memory Leak. The vulnerability is due to heap memory allocations on Characters and Actions within the function parseSWF_DEFINEBUTTON, which are not subsequently deallocated. This allows an attacker to trigger a Denial of Service (DoS) through a manipulated SWF file.

CPENameOperatorVersion
libming.sole1.4.5
libming.sole1.4.5

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for VERACODE:45720