A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
Weakness
Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libming | Libming | 0.4.8 (including) | 0.4.8 (including) |