libming Segmentation Fault Vulnerability in decompileCALLMETHOD Function Allowing Denial-of-Service

A segmentation fault vulnerability has been identified in libming version 0.4.8. The issue arises in the decompileCALLMETHOD function, where the software attempts to read memory from an invalid address, leading to a crash. This vulnerability can be exploited by using a specially crafted SWF file, causing a denial-of-service condition by disrupting the application's normal operation.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by using libming version 0.4.8 to process an SWF file that has been crafted to trigger the issue. This can be done by creating a SWF file that includes CALLMETHOD actions pointing to invalid memory addresses, particularly those that would be interpreted as zero-page references.