CVE-2017-11703: A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, whi...

Security readout for executives and security teams

CVE-2017-11703 is a denial-of-service issue in Ming 0.4.8. A specially crafted file can make the parser leak memory, potentially exhausting resources in services that process untrusted SWF/Flash content. Exposure is most likely where Ming 0.4.8 or libming-based tooling processes untrusted SWF files, such as conversion, inspection, or automated content pipelines. Systems not using Ming or not parsing attacker-controlled files are unlikely to be exposed. Treat as a targeted availability risk for file-processing services. It is not marked as actively exploited in the provided sources, but exposed automated parsers should be reviewed because crafted files can disrupt processing capacity. Mitigation focus: Inventory systems using Ming or libming 0.4.8.; Avoid parsing untrusted SWF files with affected tooling.; Run parsing jobs with memory and process isolation..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.