The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libming | Libming | * | 0.4.8 (including) |
| Ming | Ubuntu | esm-apps/xenial | * |
| Ming | Ubuntu | trusty | * |
| Ming | Ubuntu | xenial | * |