First published: Thu Mar 08 2018(Updated: )
In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Libming Libming | =0.4.8 | |
Debian Debian Linux | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2018-7876 is medium (6.5).
CVE-2018-7876 affects Libming version 0.4.8.
CVE-2018-7876 affects Debian Linux version 7.0.
A remote attacker can exploit CVE-2018-7876 by sending a crafted file.
Yes, you can find references for CVE-2018-7876 at the following URLs: [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 [2] https://github.com/libming/libming/issues/109 [3] https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html