SB2017062836 - Multiple vulnerabilities in libming

Main Vulnerability Database SB2017062836

SB2017062836 - Multiple vulnerabilities in libming

Published: June 28, 2017 Updated: August 8, 2020

Security Bulletin ID SB2017062836

Severity

High

Patch available

NO

Number of vulnerabilities 18

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 18 secuirty vulnerabilities.

1) NULL pointer dereference (CVE-ID: CVE-2018-9132)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via a crafted swf file.

2) Use-after-free (CVE-ID: CVE-2018-9009)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.

3) NULL pointer dereference (CVE-ID: CVE-2018-7866)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. A remote attacker can perform a denial of service (DoS) attack.

4) Buffer overflow (CVE-ID: CVE-2018-7867)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack.

5) Out-of-bounds read (CVE-ID: CVE-2018-7868)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.

6) Input validation error (CVE-ID: CVE-2018-7869)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.

7) NULL pointer dereference (CVE-ID: CVE-2018-7870)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

8) Out-of-bounds read (CVE-ID: CVE-2018-7871)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact.

9) NULL pointer dereference (CVE-ID: CVE-2018-7872)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

10) Buffer overflow (CVE-ID: CVE-2018-7873)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack.

11) Buffer overflow (CVE-ID: CVE-2018-7874)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

12) Out-of-bounds read (CVE-ID: CVE-2018-7875)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.

13) Resource exhaustion (CVE-ID: CVE-2018-7876)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file.

14) Buffer overflow (CVE-ID: CVE-2018-7877)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack.

15) Integer overflow (CVE-ID: CVE-2018-5294)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

16) Incorrect Conversion between Numeric Types (CVE-ID: CVE-2018-5251)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.

17) NULL pointer dereference (CVE-ID: CVE-2017-9988)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c. A remote attacker can perform a denial of service (DoS) attack.

18) NULL pointer dereference (CVE-ID: CVE-2017-9989)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack. A remote attacker can perform a denial of service (DoS) attack.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References