PT-2018-11566 · Libming · Libming

Publicado 2018-07-02 · Atualizado 2019-10-03 · CVE-2018-13066

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description The issue is related to a memory leak in the util/parser.c file of libming, which can cause a denial of service. This can be triggered through various functions, including parseSWF DEFINEBUTTON2, parseSWF DEFINEFONT, parseSWF DEFINEFONTINFO, parseSWF DEFINELOSSLESS, parseSWF DEFINESPRITE, parseSWF DEFINETEXT, parseSWF DOACTION, parseSWF FILLSTYLEARRAY, parseSWF FRAMELABEL, parseSWF LINESTYLEARRAY, parseSWF PLACEOBJECT2, or parseSWF SHAPEWITHSTYLE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2018-13066

Produtos afetados

Libming

Referências · 6

• https://github.com/libming/libming/issues/146 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13066 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-13066 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-13066 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-13066 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13066 · Aviso do Fabricante