博文

libming:heap buffer overflow in decompileCALLFUNCTION

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. A heap buffer overflow vulnerability was found in function   decompileCALLFUNCTION  in  decompile.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= heap-buffer-overflow on address 0x6120000002f0 at pc 0x0000005524b1 bp 0x7ffe6c0b9700 sp 0x7ffe6c0b96f8 READ of size 1 at 0x6120000002f0 thread T0 #0 0x5524b0 in decompileCALLFUNCTION /home/haojun/Downloads/libming-master/util/decompile.c:2864:2 #1 0x5524b0 in decompileAction /home/haojun/Downloads/libming-master/util/decompile.c:3264 #2 0x5875eb in decompileActions /home/haojun/Downloads/libming-master/util/decompile.c:3401:6 #3 0x5875eb in decompile5Action /home/haojun/Downloads/libming-master/util/decompile.c:3423...

libming:heap buffer overflow in OpCode

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. A heap buffer overflow vulnerability was found in function  OpCode  in  decompile.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= heap-buffer-overflow on address 0x612000000170 at pc 0x000000555cee bp 0x7ffcc35fb940 sp 0x7ffcc35fb938 READ of size 1 at 0x612000000170 thread T0 #0 0x555ced in OpCode /home/haojun/Downloads/libming-master/util/decompile.c:868:37 #1 0x555ced in decompileSETMEMBER /home/haojun/Downloads/libming-master/util/decompile.c:1699 #2 0x555ced in decompileAction /home/haojun/Downloads/libming-master/util/decompile.c:3202 #3 0x5875eb in decompileActions /home/haojun/Downloads/libming-master/util/decompile.c:3401:6 #4 0x5875eb in decompil...

libming:heap buffer overflow in OpCode

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. A heap buffer overflow vulnerability was found in function  OpCode  in  decompile.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= heap-buffer-overflow on address 0x6120000005f0 at pc 0x000000560490 bp 0x7ffdb7ed2610 sp 0x7ffdb7ed2608 READ of size 1 at 0x6120000005f0 thread T0 #0 0x56048f in OpCode /home/haojun/Downloads/libming-master/util/decompile.c:868:37 #1 0x56048f in decompileINCR_DECR /home/haojun/Downloads/libming-master/util/decompile.c:1474 #2 0x537f24 in decompileAction /home/haojun/Downloads/libming-master/util/decompile.c:3222:10 #3 0x5875eb in decompileActions /home/haojun/Downloads/libming-master/util/decompile.c:3401:6 #4 0x5875eb in decomp...

libming:heap buffer overflow in dcputs

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. A heap buffer overflow vulnerability was found in function  dcputs  in  decompile.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= heap-buffer-overflow on address 0x7fe82faff800 at pc 0x00000047d145 bp 0x7ffe86b6c620 sp 0x7ffe86b6bdd0 WRITE of size 45 at 0x7fe82faff800 thread T0 #0 0x47d144 in __interceptor_strcat /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:491 #1 0x5459fa in dcputs /home/haojun/Downloads/libming-master/util/decompile.c:104:2 #2 0x5459fa in decompileIMPLEMENTS /home/haojun/Downloads/libming-master/util/decompile.c:3094 #3 0x5459fa in decompileAction /home/haojun/Downloads/libming-master/util/decompi...

libming:heap buffer overflow in OpCode

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. A heap buffer overflow vulnerability was found in function  OpCode  in  decompile.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= heap-buffer-overflow on address 0x6120000005f0 at pc 0x00000056035d bp 0x7ffefd922730 sp 0x7ffefd922728 READ of size 1 at 0x6120000005f0 thread T0 #0 0x56035c in OpCode /home/haojun/Downloads/libming-master/util/decompile.c:868:37 #1 0x56035c in decompileINCR_DECR /home/haojun/Downloads/libming-master/util/decompile.c:1440 #2 0x537f24 in decompileAction /home/haojun/Downloads/libming-master/util/decompile.c:3222:10 #3 0x5875eb in decompileActions /home/haojun/Downloads/libming-master/util/decompile.c:3401:6 #4 0x5875eb in decomp...

libming:null pointer dereference in stackswap

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. A null pointer dereference vulnerability was found in function   stackswap  in  decompile.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= SEGV on unknown address 0x000000000000 (pc 0x000000545058 bp 0x603000000160 sp 0x7fffce29b5b0 T0) ==17155==The signal is caused by a READ memory access. ==17155==Hint: address points to the zero page. #0 0x545057 in stackswap /home/haojun/Downloads/libming-master/util/decompile.c:629:29 #1 0x545057 in decompileSTACKSWAP /home/haojun/Downloads/libming-master/util/decompile.c:1344 #2 0x545057 in decompileAction /home/haojun/Downloads/libming-master/util/decompile.c:3159 #3 0x5875eb in decompileActions /home/haojun/Downloads/li...

libming:invalid memory read in outputSWF_TEXT_RECORD

Description Ming  is a library for generating Macromedia Flash files (.swf), written in C, and   for working includes useful utilities king with .swf files. An invalid memory read was found in function   outputSWF_TEXT_RECORD  in  outputscript.c , which allows attackers to cause a denial of service via a crafted file. #swftocxx $FILE out ================================================================= SEGV on unknown address 0x00000000000c (pc 0x00000052876c bp 0x000000000000 sp 0x7ffcaa1a7620 T0) ==15250==The signal is caused by a READ memory access. ==15250==Hint: address points to the zero page. #0 0x52876b in outputSWF_TEXT_RECORD /home/haojun/Downloads/libming-master/util/outputscript.c:1429:13 #1 0x52941d in outputSWF_DEFINETEXT2 /home/haojun/Downloads/libming-master/util/outputscript.c:1493:6 #2 0x531311 in readMovie /home/haojun/Downloads/libming-master/util/main.c:277:4 #3 0x531311 in main /home/haojun/Downloads/lib...