Vulnerabilities > Libming > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-11-18 CVE-2017-16883 NULL Pointer Dereference vulnerability in Libming
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
network
libming CWE-476
4.3
2017-07-29 CVE-2017-11734 Out-of-bounds Read vulnerability in Libming Ming 0.4.8
A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-125
4.3
2017-07-29 CVE-2017-11733 NULL Pointer Dereference vulnerability in multiple products
A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
4.3
2017-07-29 CVE-2017-11732 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
4.3
2017-07-29 CVE-2017-11731 Out-of-bounds Read vulnerability in Libming Ming 0.4.8
An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-125
4.3
2017-07-29 CVE-2017-11730 Out-of-bounds Read vulnerability in Libming Ming 0.4.8
A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-125
4.3
2017-07-29 CVE-2017-11729 Out-of-bounds Read vulnerability in Libming Ming 0.4.8
A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-125
4.3
2017-07-29 CVE-2017-11728 Out-of-bounds Read vulnerability in Libming Ming 0.4.8
A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-125
4.3
2017-07-28 CVE-2017-11705 Missing Release of Resource after Effective Lifetime vulnerability in Libming Ming 0.4.8
A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-772
4.3
2017-07-28 CVE-2017-11704 Out-of-bounds Read vulnerability in Libming Ming 0.4.8
A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
network
libming CWE-125
4.3