CVE-2017-7578
HighSummary
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file.
Risk Assessment
This vulnerability may lead to application crashes and potentially other impacts, affecting the availability of services within the organization.
Recommendation
It is recommended to update libming to the latest version to mitigate this vulnerability and to monitor applications for unusual activities related to SWF files.
Other vulnerabilities in libming 0.4.7
See all- CVE-2016-9831High
A heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit it via a crafted SWF file.
- CVE-2016-9829High
A heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit this vulnerability via a crafted SWF file.
- CVE-2023-36239High
Version 0.4.7 of the libming library was found to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function in parser.c.
Original NVD description (English source)
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831.