CVE-2017-16883 — MEDIUM (6.5)

Q: How severe is CVE-2017-16883?

CVE-2017-16883 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2017-16883?

Check the references section above for vendor advisories and patch information. Affected products include: Libming Libming.

Vulnerability Description

The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Libming	Libming	<= 0.4.8

Related Weaknesses (CWE)

CWE-476

References

https://github.com/libming/libming/issues/77Issue TrackingVendor Advisory
https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html
https://github.com/libming/libming/issues/77Issue TrackingVendor Advisory
https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html

FAQ

What is CVE-2017-16883?

CVE-2017-16883 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

How severe is CVE-2017-16883?

CVE-2017-16883 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-16883?

Check the references section above for vendor advisories and patch information. Affected products include: Libming Libming.