CVE-2018-6315

The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
References
Link Resource
https://github.com/libming/libming/issues/101 Exploit Issue Tracking
http://www.securityfocus.com/bid/102828 Third Party Advisory VDB Entry
https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201904-24 Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:libming:libming:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Information

Published : 2018-01-25 10:29

Updated : 2019-04-26 12:41


NVD link : CVE-2018-6315

Mitre link : CVE-2018-6315

Products Affected
No products.
CWE
CWE-125

Out-of-bounds Read

CWE-190