PT-2018-11566
CVE-2018-13066
·
Published
2018-07-02
·
Updated
2019-10-03
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libming version 0.4.8
Description
The issue is related to a memory leak in the util/parser.c file of libming, which can cause a denial of service. This can be triggered through various functions, including
parseSWF DEFINEBUTTON2, parseSWF DEFINEFONT, parseSWF DEFINEFONTINFO, parseSWF DEFINELOSSLESS, parseSWF DEFINESPRITE, parseSWF DEFINETEXT, parseSWF DOACTION, parseSWF FILLSTYLEARRAY, parseSWF FRAMELABEL, parseSWF LINESTYLEARRAY, parseSWF PLACEOBJECT2, or parseSWF SHAPEWITHSTYLE.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾