ELA-12-1 ming security update

several heap buffer overflow vulnerabilities

2018-07-01

Multiple vulnerabilities have been discovered in ming:

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 is vulnerable to a heap buffer overflow. This vulnerability might be triggered by remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted SWF file.
CVE-2018-11225

The dcputs function in decompile.c in libming through 0.4.8 is vulnerable to a NULL pointer dereference. This vulnerability might be triggered by remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted SWF file.
CVE-2018-11100

The decompileSETTARGET function in decompile.c in libming through 0.4.8 is vulnerable to a heap buffer overflow. This vulnerability might be triggered by remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted SWF file.
CVE-2018-11095

The decompileJUMP function in decompile.c in libming through 0.4.8 is vulnerable to a heap buffer overflow. This vulnerability might be triggered by remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted SWF file.

For Debian 7 Wheezy, these problems have been fixed in version 1:0.4.4-1.1+deb7u10.

We recommend that you upgrade your ming packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.