Filtered by vendor Libming
Subscriptions
Filtered by product Libming
Subscriptions
Total
81 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2018-13251 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file. | ||||
CVE-2018-13250 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. | ||||
CVE-2018-13066 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF_DEFINELOSSLESS, parseSWF_DEFINESPRITE, parseSWF_DEFINETEXT, parseSWF_DOACTION, parseSWF_FILLSTYLEARRAY, parseSWF_FRAMELABEL, parseSWF_LINESTYLEARRAY, parseSWF_PLACEOBJECT2, or parseSWF_SHAPEWITHSTYLE. | ||||
CVE-2018-11226 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. | ||||
CVE-2018-11225 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. | ||||
CVE-2018-11100 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. | ||||
CVE-2018-11095 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. | ||||
CVE-2018-11017 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact. | ||||
CVE-2017-9989 | 2 Debian, Libming | 2 Debian Linux, Libming | 2024-11-21 | N/A |
util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack. | ||||
CVE-2017-9988 | 2 Debian, Libming | 2 Debian Linux, Libming | 2024-11-21 | N/A |
The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c. | ||||
CVE-2017-8782 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error. | ||||
CVE-2017-7578 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831. | ||||
CVE-2017-16898 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264. | ||||
CVE-2017-16883 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file. | ||||
CVE-2016-9831 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
Heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file. | ||||
CVE-2016-9829 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
Heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file. | ||||
CVE-2016-9828 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SWF file. | ||||
CVE-2016-9827 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The _iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (buffer over-read) via a crafted SWF file. | ||||
CVE-2016-9266 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift. | ||||
CVE-2016-9265 | 1 Libming | 1 Libming | 2024-11-21 | N/A |
The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file. |