CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2016-9829
https://notcve.org/view.php?id=CVE-2016-9829
Heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file. Desbordamiento de búfer basado en memoria dinámica en la función parseSWF_DEFINEFONT en parser.c en la herramienta listswf en libming 0.4.7 permite a atacantes remotos tener impacto no especificado a través de un archivo SWF manipulado. • http://www.openwall.com/lists/oss-security/2016/12/01/5 http://www.openwall.com/lists/oss-security/2016/12/05/4 http://www.securityfocus.com/bid/95133 https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-parseswf_definefont-parser-c • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2CVE-2016-9827
https://notcve.org/view.php?id=CVE-2016-9827
The _iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (buffer over-read) via a crafted SWF file. La función _iprintf en outputtxt.c en la herramienta listswf en libming 0.4.7 permite a atacantes remotos provocar una denegación de servicio (sobre lectura del búfer) a través de un archivo SWF manipulado. • http://www.openwall.com/lists/oss-security/2016/12/01/7 http://www.openwall.com/lists/oss-security/2016/12/05/2 http://www.securityfocus.com/bid/95086 https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-_iprintf-outputtxt-c • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2CVE-2016-9828
https://notcve.org/view.php?id=CVE-2016-9828
The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SWF file. La función dumpBuffer en read.c en la herramienta listswf en libming 0.4.7 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL) a través de un archivo SWF manipulado. • http://www.openwall.com/lists/oss-security/2016/12/01/8 http://www.openwall.com/lists/oss-security/2016/12/05/3 http://www.securityfocus.com/bid/94627 https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-null-pointer-dereference-in-dumpbuffer-read-c • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2016-9831
https://notcve.org/view.php?id=CVE-2016-9831
Heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file. Desbordamiento de búfer basado en memoria dinámica en la función parseSWF_RGBA en parser.c en la herramienta listswf en libming 0.4.7 permite a atacantes remotos tener impacto no especificado a través de un archivo SWF manipulado. • http://www.openwall.com/lists/oss-security/2016/12/01/6 http://www.openwall.com/lists/oss-security/2016/12/05/6 http://www.securityfocus.com/bid/94767 https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-parseswf_rgba-parser-c • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •