6.5
CVE-2014-3478
- EPSS 15.18%
- Veröffentlicht 09.07.2014 11:07:01
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginBuffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Christos Zoulas ≫ File Version <= 5.18
Christos Zoulas ≫ File Version5.00
Christos Zoulas ≫ File Version5.01
Christos Zoulas ≫ File Version5.02
Christos Zoulas ≫ File Version5.03
Christos Zoulas ≫ File Version5.04
Christos Zoulas ≫ File Version5.05
Christos Zoulas ≫ File Version5.06
Christos Zoulas ≫ File Version5.07
Christos Zoulas ≫ File Version5.08
Christos Zoulas ≫ File Version5.09
Christos Zoulas ≫ File Version5.10
Christos Zoulas ≫ File Version5.11
Christos Zoulas ≫ File Version5.12
Christos Zoulas ≫ File Version5.13
Christos Zoulas ≫ File Version5.14
Christos Zoulas ≫ File Version5.15
Christos Zoulas ≫ File Version5.16
Christos Zoulas ≫ File Version5.17
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 15.18% | 0.963 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.php.net/ChangeLog-5.php
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
http://rhn.redhat.com/errata/RHSA-2014-1765.html
https://support.apple.com/HT204659
http://support.apple.com/kb/HT6443
http://marc.info/?l=bugtraq&m=141017844705317&w=2
http://rhn.redhat.com/errata/RHSA-2014-1327.html
http://rhn.redhat.com/errata/RHSA-2014-1766.html
http://www.debian.org/security/2014/dsa-3021
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://mx.gw.com/pipermail/file/2014/001553.html
http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
http://secunia.com/advisories/59794
http://secunia.com/advisories/59831
http://www.debian.org/security/2014/dsa-2974
http://www.securityfocus.com/bid/68239
https://bugs.php.net/bug.php?id=67410
https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08