Unscored CVE-2017-16883 EUVD-2017-8054GHSA-g7gx-gfg4-px99

The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow …

Published Nov 18, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 7	ming	1:0.4.4-1.1+deb7u6	DLA-1240-1

Ubuntu