CVE-2014-0207
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
82.1%
The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.
References
lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
marc.info/?l=bugtraq&m=141017844705317&w=2
mx.gw.com/pipermail/file/2014/001553.html
rhn.redhat.com/errata/RHSA-2014-1765.html
rhn.redhat.com/errata/RHSA-2014-1766.html
secunia.com/advisories/59794
secunia.com/advisories/59831
support.apple.com/kb/HT6443
www.debian.org/security/2014/dsa-2974
www.debian.org/security/2014/dsa-3021
www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
www.php.net/ChangeLog-5.php
www.securityfocus.com/bid/68243
bugs.php.net/bug.php?id=67326
bugzilla.redhat.com/show_bug.cgi?id=1091842
github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391
support.apple.com/HT204659
Social References
More
Related
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
82.1%