Skip to content
OpenAdvisories
Unscored CVE-2018-9165 EUVD-2018-20762GHSA-ffg8-fgfp-q9p2

The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep cop…

Published Apr 1, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 7 ming 1:0.4.4-1.1+deb7u8 DLA-1343-1
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS ming No fix yet —

Advisories 1

References