Libming

libming

124 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (124)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-5251 2Debian Libming 2Debian Linux Libming Nov 21, 2024 Jan 5, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service...Show more In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.Show less
CVE-2017-16898 1Libming 1Libming May 13, 2026 Nov 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability...Show more The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264.Show less
CVE-2017-16883 1Libming 1Libming May 13, 2026 Nov 18, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
CVE-2017-11734 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11733 2Debian Libming 2Debian Linux Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11732 2Debian Libming 2Debian Linux Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11731 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11730 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11729 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11728 1Libming 1Ming May 13, 2026 Jul 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11705 1Libming 1Ming May 13, 2026 Jul 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11704 1Libming 1Ming May 13, 2026 Jul 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-11703 1Libming 1Ming May 13, 2026 Jul 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-9989 2Debian Libming 2Debian Linux Libming May 13, 2026 Jun 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack.
CVE-2017-9988 2Debian Libming 2Debian Linux Libming May 13, 2026 Jun 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c.
CVE-2017-8782 1Libming 1Libming May 13, 2026 May 31, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an...Show more The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error.Show less
CVE-2017-7578 1Libming 1Libming May 13, 2026 Apr 7, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: th...Show more Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831.Show less
CVE-2016-9266 1Libming 1Libming May 13, 2026 Mar 23, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift.
CVE-2016-9265 1Libming 1Libming May 13, 2026 Mar 23, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.
CVE-2016-9264 1Libming 1Libming May 13, 2026 Mar 23, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Previous 1 2 3 4 567 Next