CVE-2023-36239
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Version 0.4.7 of the libming library was found to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function in parser.c.
Risk Assessment
The buffer overflow may lead to the execution of malicious code, posing a serious security risk to applications using this library.
Recommendation
It is recommended to update the libming library to the latest version to mitigate this vulnerability.
Other vulnerabilities in libming 0.4.7
See all- CVE-2017-7578High
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file.
- CVE-2016-9831High
A heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit it via a crafted SWF file.
- CVE-2016-9829High
A heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit this vulnerability via a crafted SWF file.
Original NVD description (English source)
libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.