PT-2018-11566 · Libming · Libming

Published 2018-07-02 · Updated 2019-10-03 · CVE-2018-13066

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description The issue is related to a memory leak in the util/parser.c file of libming, which can cause a denial of service. This can be triggered through various functions, including parseSWF DEFINEBUTTON2, parseSWF DEFINEFONT, parseSWF DEFINEFONTINFO, parseSWF DEFINELOSSLESS, parseSWF DEFINESPRITE, parseSWF DEFINETEXT, parseSWF DOACTION, parseSWF FILLSTYLEARRAY, parseSWF FRAMELABEL, parseSWF LINESTYLEARRAY, parseSWF PLACEOBJECT2, or parseSWF SHAPEWITHSTYLE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2018-13066

Affected Products

Libming

References · 6

• https://github.com/libming/libming/issues/146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13066 · Security Note
• https://osv.dev/vulnerability/CVE-2018-13066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13066 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-13066 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13066 · Vendor Advisory