The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libming | Libming | * | 0.4.8 (including) |
| Ming | Ubuntu | esm-apps/xenial | * |
| Ming | Ubuntu | trusty | * |
| Ming | Ubuntu | upstream | * |
| Ming | Ubuntu | xenial | * |