Libming

Every one of the 107 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure.CVE-2019-7582Libming · 2.5% likely

   CWE-770

2. The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers…CVE-2018-6315Libming · 2.5% likely

   CWE-125

3. The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory alloc…CVE-2019-7581Libming · 2.5% likely

   CWE-770

4. The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other…CVE-2018-6359Libming · 2.4% likely

   CWE-416

5. Heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file.CVE-2016-9831Libming · 2.1% likely

   CWE-119

6. Heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SW…CVE-2016-9829Libming · 2.1% likely

   CWE-119

7. listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift.CVE-2016-9266Libming · 2.1% likely

   CWE-189

8. util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack.CVE-2017-9989Libming · 2.0% likely

   CWE-476

9. The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack…CVE-2017-9988Libming · 2.0% likely

   CWE-476

10. libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a…CVE-2018-9132Libming · 2.0% likely

    CWE-476

11. In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service vi…CVE-2018-7876Libming · 2.0% likely

    CWE-400

12. The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SWF file.CVE-2016-9828Libming · 1.9% likely

    CWE-476

13. The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to…CVE-2018-11225Libming · 1.9% likely

    CWE-119

14. In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability…CVE-2018-5294Libming · 1.9% likely

    CWE-190

15. The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or un…CVE-2018-6358Libming · 1.9% likely

    CWE-787

16. There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack.CVE-2018-7873Libming · 1.9% likely

    CWE-787

17. In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.CVE-2018-9009Libming · 1.9% likely

    CWE-416

18. In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this v…CVE-2018-5251Libming · 1.8% likely

    CWE-681

19. A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to deni…CVE-2018-7866Libming · 1.8% likely

    CWE-476

20. The _iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (buffer over-read) via a crafted SWF file.CVE-2016-9827Libming · 1.8% likely

    CWE-119

21. The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote a…CVE-2018-11100Libming · 1.8% likely

    CWE-119

22. The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attack…CVE-2018-11095Libming · 1.8% likely

    CWE-119

23. Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c.CVE-2020-11895Libming · 1.7% likely

    CWE-125

24. Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.CVE-2020-11894Libming · 1.7% likely

    CWE-125

25. Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.CVE-2016-9264Libming · 1.7% likely

    CWE-119

26. There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possib…CVE-2018-7871Libming · 1.7% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.