CVE-2019-12981: Input Validation

Published Jun 26, 2019

Updated

Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShapesetLeftFillStyle in blocks/shape.c.

Affected Software

1 affected component

Libming Libming=0.4.8

Remediation

Patch Available

https://github.com/libming/libming/commit/6e76e8c71cb51c8ba0aa9737a636b9ac3029887f

Event History

Jun 26, 2019

CVE Published

via MITRE·05:09 PM

Data Sourced

via MITRE·05:09 PM

Description

Frequently Asked Questions

What is the vulnerability ID for the fill overflow vulnerability in Ming (aka libming) 0.4.8?

The vulnerability ID for the fill overflow vulnerability in Ming (aka libming) 0.4.8 is CVE-2019-12981.

What is the severity rating of the fill overflow vulnerability in Ming (aka libming) 0.4.8?

The severity rating of the fill overflow vulnerability in Ming (aka libming) 0.4.8 is 8.8 (high).

How does the fill overflow vulnerability in Ming (aka libming) 0.4.8 occur?

The fill overflow vulnerability in Ming (aka libming) 0.4.8 occurs in the function SWFShape_setLeftFillStyle in blocks/shape.c.

Which version of Ming (aka libming) is affected by the fill overflow vulnerability?

Ming (aka libming) 0.4.8 is the version affected by the fill overflow vulnerability.

Is there a fix available for the fill overflow vulnerability in Ming (aka libming) 0.4.8?

Yes, a fix for the fill overflow vulnerability in Ming (aka libming) 0.4.8 is available. Please refer to the following reference for more information: [GitHub Commit](https://github.com/libming/libming/commit/6e76e8c71cb51c8ba0aa9737a636b9ac3029887f)