CVE-2021-44591 - In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file

Back Back to CVE browser

MEDIUM

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file

Published Jan 6, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 1.02%

Description

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31414
Advisory
https://github.com/libming/libming
x_refsource_MISCThird Party Advisory
https://github.com/libming/libming/issues/235
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31414		Advisory
https://github.com/libming/libming		x_refsource_MISCThird Party Advisory
https://github.com/libming/libming/issues/235		x_refsource_MISCExploitThird Party Advisory