Test Kennung:	1.3.6.1.4.1.25623.1.0.891305
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for ming (DLA-1305-1)
Zusammenfassung:	Multiple vulnerabilities have been discovered in Ming:;;CVE-2018-5251;;Integer signedness error vulnerability (left shift of a negative value) in;the readSBits function (util/read.c). Remote attackers can leverage this;vulnerability to cause a denial of service via a crafted swf file.;;CVE-2018-5294;;Integer overflow vulnerability (caused by an out-of-range left shift) in;the readUInt32 function (util/read.c). Remote attackers could leverage this;vulnerability to cause a denial-of-service via a crafted swf file.;;CVE-2018-6315;;Integer overflow and resultant out-of-bounds read in the;outputSWF_TEXT_RECORD function (util/outputscript.c). Remote attackers;could leverage this vulnerability to cause a denial of service or;unspecified other impact via a crafted SWF file.;;CVE-2018-6359;;Use-after-free vulnerability in the decompileIF function;(util/decompile.c). Remote attackers could leverage this vulnerability to;cause a denial of service or unspecified other impact via a crafted SWF;file.
Beschreibung:	Summary: Multiple vulnerabilities have been discovered in Ming: CVE-2018-5251 Integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file. CVE-2018-5294 Integer overflow vulnerability (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file. CVE-2018-6315 Integer overflow and resultant out-of-bounds read in the outputSWF_TEXT_RECORD function (util/outputscript.c). Remote attackers could leverage this vulnerability to cause a denial of service or unspecified other impact via a crafted SWF file. CVE-2018-6359 Use-after-free vulnerability in the decompileIF function (util/decompile.c). Remote attackers could leverage this vulnerability to cause a denial of service or unspecified other impact via a crafted SWF file. Affected Software/OS: ming on Debian Linux Solution: For Debian 7 'Wheezy', these problems have been fixed in version 0.4.4-1.1+deb7u7. We recommend that you upgrade your ming packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5251 https://security.gentoo.org/glsa/201904-24 https://github.com/libming/libming/issues/97 https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html Common Vulnerability Exposure (CVE) ID: CVE-2018-5294 https://github.com/libming/libming/issues/98 Common Vulnerability Exposure (CVE) ID: CVE-2018-6315 BugTraq ID: 102828 http://www.securityfocus.com/bid/102828 Common Vulnerability Exposure (CVE) ID: CVE-2018-6359 BugTraq ID: 102856 http://www.securityfocus.com/bid/102856
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.