Show filters
98 Total Results
Displaying 71-80 of 98
Sort by:
Attacker Value
Unknown

CVE-2018-6358

Disclosure Date: January 27, 2018 (last updated November 26, 2024)
The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file.
0
Attacker Value
Unknown

CVE-2018-6359

Disclosure Date: January 27, 2018 (last updated November 26, 2024)
The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
0
Attacker Value
Unknown

CVE-2018-6315

Disclosure Date: January 25, 2018 (last updated November 26, 2024)
The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
0
Attacker Value
Unknown

CVE-2018-5294

Disclosure Date: January 08, 2018 (last updated November 26, 2024)
In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.
0
Attacker Value
Unknown

CVE-2018-5251

Disclosure Date: January 05, 2018 (last updated November 26, 2024)
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.
0
Attacker Value
Unknown

CVE-2017-16898

Disclosure Date: November 20, 2017 (last updated November 26, 2024)
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264.
0
Attacker Value
Unknown

CVE-2017-16883

Disclosure Date: November 18, 2017 (last updated November 26, 2024)
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
0
Attacker Value
Unknown

CVE-2017-11734

Disclosure Date: July 29, 2017 (last updated November 26, 2024)
A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
0
Attacker Value
Unknown

CVE-2017-11730

Disclosure Date: July 29, 2017 (last updated November 26, 2024)
A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
0
Attacker Value
Unknown

CVE-2017-11733

Disclosure Date: July 29, 2017 (last updated November 26, 2024)
A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
0