Integer Overflow in readUInt32 Function in libming 0.4.8 Allows for Denial-of-Service Attacks via Crafted SWF File

Integer Overflow in readUInt32 Function in libming 0.4.8 Allows for Denial-of-Service Attacks via Crafted SWF File

CVE-2018-5294 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Learn more about our Cis Benchmark Audit For Ibm I.