ming - Security Update
Summary
DLA-1240-1: ming - security update. Affects ming versions < 1:0.4.4-1.1+deb7u6. Fixed in 1:0.4.4-1.1+deb7u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ming is a software library for generating SWF (Flash) format files. It provides a set of C libraries for creating SWF files, as well as a Python wrapper for the C libraries. Ming is commonly used for creating dynamic and interactive Flash content. However, versions of Ming up to 0.4.8 are vulnerable to multiple security issues.
Vulnerability Detail
The vulnerabilities in Ming include:
-
CVE-2017-11732: A heap-based buffer overflow vulnerability in the function dcputs (util/decompile.c) allows attackers to cause a denial of service by exploiting a crafted SWF file.
-
CVE-2017-16883: A NULL pointer dereference vulnerability in the function outputSWF_TEXT_RECORD (util/outputscript.c) allows attackers to cause a denial of service by exploiting a crafted SWF file.
-
CVE-2017-16898: A global buffer overflow vulnerability in the function printMP3Headers (util/listmp3.c) allows attackers to cause a denial of service by exploiting a crafted SWF file.
These vulnerabilities can be exploited by attackers to crash the application or potentially execute arbitrary code.
How To Fix
Minimum fixed version
1:0.4.4-1.1+deb7u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mingTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading the ming package to version 1:0.4.4-1.1+deb7u6 or later is crucial to address the identified vulnerabilities. It is recommended to follow the provided steps to ensure the security of your system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ming →
FAQ
Ming is a software library for generating SWF (Flash) format files. It is commonly used for creating dynamic and interactive Flash content.
Versions of Ming up to 0.4.8 are affected by these vulnerabilities.
These vulnerabilities can be exploited by attackers to crash the application or potentially execute arbitrary code.
To fix these vulnerabilities, it is recommended to upgrade the ming package to version 1:0.4.4-1.1+deb7u6 or later.
No specific workaround has been provided for these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for ming.
