libming vulnerabilities

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file.

A heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit it via a crafted SWF file.

A heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit this vulnerability via a crafted SWF file.

An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.

libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.

A buffer overflow vulnerability in the dcputchar function in decompile.c in libming 0.4.8. It may lead to crashes or code execution.

In libming 0.4.8, there is a buffer overflow vulnerability in the strcat function in asan_interceptors.cpp.

Version 0.4.7 of the libming library was found to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function in parser.c.