Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 651574 (CVE-2018-8806, CVE-2018-8807, CVE-2018-8961, CVE-2018-8962, CVE-2018-8963, CVE-2018-8964, CVE-2018-9009) - media-libs/ming: Multiple vulnerabilities
Summary: media-libs/ming: Multiple vulnerabilities
Status: RESOLVED FIXED
Alias: CVE-2018-8806, CVE-2018-8807, CVE-2018-8961, CVE-2018-8962, CVE-2018-8963, CVE-2018-8964, CVE-2018-9009
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://github.com/libming/libming/co...
Whiteboard: B3 [noglsa cve]
Keywords:
Depends on:
Blocks:
 
Reported: 2018-03-26 13:10 UTC by GLSAMaker/CVETool Bot
Modified: 2019-09-06 21:57 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2018-03-26 13:10:54 UTC 
CVE-2018-9009 (https://nvd.nist.gov/vuln/detail/CVE-2018-9009):
  In libming 0.4.8, there is a use-after-free in the decompileJUMP function of
  the decompile.c file.

CVE-2018-8964 (https://nvd.nist.gov/vuln/detail/CVE-2018-8964):
  In libming 0.4.8, the decompileDELETE function of decompile.c has a
  use-after-free. Remote attackers could leverage this vulnerability to cause
  a denial of service via a crafted swf file.

CVE-2018-8963 (https://nvd.nist.gov/vuln/detail/CVE-2018-8963):
  In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a
  use-after-free. Remote attackers could leverage this vulnerability to cause
  a denial of service via a crafted swf file.

CVE-2018-8962 (https://nvd.nist.gov/vuln/detail/CVE-2018-8962):
  In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of
  decompile.c has a use-after-free. Remote attackers could leverage this
  vulnerability to cause a denial of service via a crafted swf file.

CVE-2018-8961 (https://nvd.nist.gov/vuln/detail/CVE-2018-8961):
  In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a
  use-after-free. Remote attackers could leverage this vulnerability to cause
  a denial of service via a crafted swf file.

CVE-2018-8807 (https://nvd.nist.gov/vuln/detail/CVE-2018-8807):
  In libming 0.4.8, these is a use-after-free in the function
  decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this
  vulnerability to cause a denial of service via a crafted swf file.

CVE-2018-8806 (https://nvd.nist.gov/vuln/detail/CVE-2018-8806):
  In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp
  function of decompile.c. Remote attackers could use this vulnerability to
  cause a denial-of-service via a crafted swf file.
Comment 1 Aaron Bauman (RETIRED) gentoo-dev 2019-04-05 01:17:40 UTC 
(In reply to GLSAMaker/CVETool Bot from comment #0)
> CVE-2018-9009 (https://nvd.nist.gov/vuln/detail/CVE-2018-9009):
>   In libming 0.4.8, there is a use-after-free in the decompileJUMP function
> of
>   the decompile.c file.
> 

Not fixed yet.

All others are fixed in media-libs/ming-0.20181112
Comment 2 Larry the Git Cow gentoo-dev 2019-08-04 19:36:30 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f85984054ed9f49d7245234ee6aa9e737607f148

commit f85984054ed9f49d7245234ee6aa9e737607f148
Author:     Aaron Bauman <bman@gentoo.org>
AuthorDate: 2019-08-04 19:29:04 +0000
Commit:     Aaron Bauman <bman@gentoo.org>
CommitDate: 2019-08-04 19:29:04 +0000

    profiles/package.mask: add media-libs/ming
    
    Bug: https://bugs.gentoo.org/626412
    Bug: https://bugs.gentoo.org/650006
    Bug: https://bugs.gentoo.org/651574
    Bug: https://bugs.gentoo.org/661152
    Bug: https://bugs.gentoo.org/678804
    
    Signed-off-by: Aaron Bauman <bman@gentoo.org>

 profiles/package.mask | 5 +++++
 1 file changed, 5 insertions(+)
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-06 07:23:49 UTC 
The package has been removed.