ming - Multiple Vulnerabilities
Summary
DLA-1343-1: ming - security update. Affects ming versions < 1:0.4.4-1.1+deb7u8. Fixed in 1:0.4.4-1.1+deb7u8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ming is a library for generating Macromedia Flash files (SWF). It provides a set of APIs for creating SWF files programmatically. The library is widely used in various applications and frameworks for generating Flash content. However, multiple vulnerabilities have been discovered in Ming that could be exploited by remote attackers to cause denial of service (DoS) attacks or potentially execute arbitrary code.
Vulnerability Detail
The vulnerabilities in Ming include:
- CVE-2018-6358: A heap-based buffer overflow vulnerability in the printDefineFont2 function (util/listfdb.c) could be leveraged by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-7867: A heap-based buffer overflow vulnerability in the getString function (util/decompile.c) during a RegisterNumber sprintf could be exploited by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-7868: A heap-based buffer over-read vulnerability in the getName function (util/decompile.c) for CONSTANT8 data could be leveraged by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-7870: An invalid memory address dereference in the getString function (util/decompile.c) for CONSTANT16 data could be exploited by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-7871: A heap-based buffer over-read vulnerability in the getName function (util/decompile.c) for CONSTANT16 data could be leveraged by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-7872: An invalid memory address dereference in the getName function (util/decompile.c) for CONSTANT16 data could be exploited by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-7875: A heap-based buffer over-read vulnerability in the getName function (util/decompile.c) for CONSTANT8 data could be leveraged by remote attackers to cause a DoS via a crafted SWF file.
- CVE-2018-9165: The pushdup function (util/decompile.c) performs a shallow copy of String elements, allowing simultaneous change of multiple elements of the stack, which indirectly makes the library vulnerable to a NULL pointer dereference in getName (util/decompile.c). Remote attackers could exploit this vulnerability to cause a DoS via a crafted SWF file.
How To Fix
Minimum fixed version
1:0.4.4-1.1+deb7u8
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mingTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities.
Conclusion
Multiple vulnerabilities have been discovered in the ming package, which could be exploited by remote attackers to cause denial of service (DoS) attacks or potentially execute arbitrary code. It is crucial to update the ming package to the latest version to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ming →
FAQ
Ming is a library for generating Macromedia Flash files (SWF). It provides APIs for creating SWF files programmatically.
The vulnerabilities in Ming include heap-based buffer overflow and over-read vulnerabilities, as well as an invalid memory address dereference vulnerability.
Remote attackers can exploit these vulnerabilities by crafting malicious SWF files and causing a denial of service (DoS) or potentially executing arbitrary code.
The impact of these vulnerabilities includes potential DoS attacks and the possibility of remote code execution.
To fix these vulnerabilities, it is recommended to upgrade the ming package to the latest version available.
Related vulnerabilities
Recent vulnerabilities recorded for ming.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
