Fine Free file vulnerabilites CVE-2014-1943 and CVE-2014-2270

2014-10-10T02:59:00
ID F5:K15689
Type f5
Reporter f5
Modified 2016-01-09T02:19:00

Description

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

Impact

None. No F5 products are vulnerable to this vulnerability.

None