CVE-2014-1943

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:fine_free_file_project:fine_free_file:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-02-18 19:55

Updated : 2024-02-28 12:20


NVD link : CVE-2014-1943

Mitre link : CVE-2014-1943

CVE.ORG link : CVE-2014-1943


JSON object : View

Products Affected

canonical

  • ubuntu_linux

php

  • php

debian

  • debian_linux

fine_free_file_project

  • fine_free_file
CWE
CWE-755

Improper Handling of Exceptional Conditions