ZeroHour

CVE-2018-5251

PoC
CVSS 3.0
6.5 medium
EPSS
2%p78
Published
()
Modified
Description

In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.

Vendors
libmingdebian
Products
libming, debian linux
Weakness
CWE-681
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.