CVE-2014-0207

 

Published at: - 09-07-2014 01:07

Last modified: - 28-09-2022 10:39

Total changes: - 2

Description

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• [file] 20140612 file-5.19 is now available-Broken Link
• http://www.php.net/ChangeLog-5.php
• https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391
• https://bugzilla.redhat.com/show_bug.cgi?id=1091842
• https://bugs.php.net/bug.php?id=67326
• 59794-Not Applicable
• 59831-Not Applicable
• http://support.apple.com/kb/HT6443
• DSA-3021-Third Party Advisory
• RHSA-2014:1766-Third Party Advisory
• DSA-2974-Third Party Advisory
• RHSA-2014:1765-Third Party Advisory
• openSUSE-SU-2014:1236-Mailing List, Third Party Advisory
• APPLE-SA-2015-04-08-2-Broken Link, Mailing List
• https://support.apple.com/HT204659
• SSRT101681-Issue Tracking, Mailing List, Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
• 68243-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2014-0207

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures