CVE-2021-31240
First published: Tue May 09 2023(Updated: )
An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libming Libming | =0.4.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-31240.
What is the severity of CVE-2021-31240?
The severity of CVE-2021-31240 is high (CVSS score 7.8).
How can a local attacker exploit CVE-2021-31240?
A local attacker can exploit CVE-2021-31240 by executing arbitrary code using the parseSWF_IMPORTASSETS function in the parser.c file of libming v.0.4.8.
Which version of libming is affected by CVE-2021-31240?
The version affected by CVE-2021-31240 is libming v.0.4.8.
Is there a fix available for CVE-2021-31240?
There is no specific fix available for CVE-2021-31240. It is recommended to update to a patched version of libming or implement relevant mitigations provided by the software vendor.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/libming
- canonical/libming libming
- version/libming libming/0.4.8