Lucene search

K
cvelistMitreCVELIST:CVE-2013-4636
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-4636

2022-10-0316:14:56
mitre
raw.githubusercontent.com

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%