high8.8
CVE-2018-6315
The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which …
Impact
The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libming | Libming | through 0.4.8 |
| Debian | Debian Linux | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102828
- https://github.com/libming/libming/issues/101
- https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html
- https://security.gentoo.org/glsa/201904-24
- http://www.securityfocus.com/bid/102828
- https://github.com/libming/libming/issues/101
- https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html
- https://security.gentoo.org/glsa/201904-24