Libming · Libming · CVE-2021-31240
**Name of the Vulnerable Software and Affected Versions**
libming version 0.4.8
**Description**
The issue allows a local attacker to execute arbitrary code via the `parseSWF IMPORTASSETS` function in the parser.c file. This enables the attacker to potentially gain control over the system.
**Recommendations**
For libming version 0.4.8, consider disabling the `parseSWF IMPORTASSETS` function as a temporary workaround until a patch is available. Restrict access to the parser.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.