Lucene search

K
cve[email protected]CVE-2014-2270
HistoryMar 14, 2014 - 3:55 p.m.

CVE-2014-2270

2014-03-1415:55:00
CWE-119
web.nvd.nist.gov
64
2
cve-2014-2270
softmagic.c
file
libmagic
denial of service
out-of-bounds
memory access
crash
pe executable

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.959 High

EPSS

Percentile

99.4%

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

Social References

More

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.959 High

EPSS

Percentile

99.4%