Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:08
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - | |
References | () http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html - | |
References | () http://marc.info/?l=bugtraq&m=141017844705317&w=2 - | |
References | () http://mx.gw.com/pipermail/file/2014/001553.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2014-1327.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2014-1765.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2014-1766.html - | |
References | () http://secunia.com/advisories/59794 - | |
References | () http://secunia.com/advisories/59831 - | |
References | () http://support.apple.com/kb/HT6443 - | |
References | () http://www.debian.org/security/2014/dsa-2974 - | |
References | () http://www.debian.org/security/2014/dsa-3021 - | |
References | () http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - | |
References | () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - | |
References | () http://www.php.net/ChangeLog-5.php - | |
References | () http://www.securityfocus.com/bid/68239 - | |
References | () https://bugs.php.net/bug.php?id=67410 - Patch | |
References | () https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08 - Exploit, Patch | |
References | () https://support.apple.com/HT204659 - |
Information
Published : 2014-07-09 11:07
Updated : 2024-11-21 02:08
NVD link : CVE-2014-3478
Mitre link : CVE-2014-3478
CVE.ORG link : CVE-2014-3478
JSON object : View
Products Affected
php
- php
christos_zoulas
- file
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer