Lucene search
HistoryJun 04, 2014 - 2:55 p.m.
CVE-2014-2053
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.7
Confidence
High
EPSS
0.007
Percentile
80.8%
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Affected configurations
Node
getid3getid3Rangeâ¤1.9.7
ORgetid3getid3Match1.9.0
ORgetid3getid3Match1.9.1
ORgetid3getid3Match1.9.2
ORgetid3getid3Match1.9.3
ORgetid3getid3Match1.9.4b1
ORgetid3getid3Match1.9.5
ORgetid3getid3Match1.9.6
ORowncloudowncloudRangeâ¤5.0.14a
ORowncloudowncloudMatch5.0.0
ORowncloudowncloudMatch5.0.1
ORowncloudowncloudMatch5.0.2
ORowncloudowncloudMatch5.0.3
ORowncloudowncloudMatch5.0.4
ORowncloudowncloudMatch5.0.5
ORowncloudowncloudMatch5.0.6
ORowncloudowncloudMatch5.0.7
ORowncloudowncloudMatch5.0.8
ORowncloudowncloudMatch5.0.9
ORowncloudowncloudMatch5.0.10
ORowncloudowncloudMatch5.0.11
ORowncloudowncloudMatch5.0.12
ORowncloudowncloudMatch5.0.13
ORowncloudowncloudMatch5.0.14
Node
getid3getid3Rangeâ¤1.9.7
ORgetid3getid3Match1.9.0
ORgetid3getid3Match1.9.1
ORgetid3getid3Match1.9.2
ORgetid3getid3Match1.9.3
ORgetid3getid3Match1.9.4b1
ORgetid3getid3Match1.9.5
ORgetid3getid3Match1.9.6
ORowncloudowncloudMatch6.0.0
ORowncloudowncloudMatch6.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| getid3 | getid3 | * | cpe:2.3:a:getid3:getid3:*:*:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.0 | cpe:2.3:a:getid3:getid3:1.9.0:*:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.1 | cpe:2.3:a:getid3:getid3:1.9.1:*:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.2 | cpe:2.3:a:getid3:getid3:1.9.2:*:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.3 | cpe:2.3:a:getid3:getid3:1.9.3:*:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.4 | cpe:2.3:a:getid3:getid3:1.9.4:b1:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.5 | cpe:2.3:a:getid3:getid3:1.9.5:*:*:*:*:*:*:* |
| getid3 | getid3 | 1.9.6 | cpe:2.3:a:getid3:getid3:1.9.6:*:*:*:*:*:*:* |
| owncloud | owncloud | * | cpe:2.3:a:owncloud:owncloud:*:a:*:*:*:*:*:* |
| owncloud | owncloud | 5.0.0 | cpe:2.3:a:owncloud:owncloud:5.0.0:*:*:*:*:*:*:* |
Related
seebug
seebug
getID3() XMLĺ¤é¨ĺŽä˝ćźć´
2014-03-19 00:00:00
friendsofphp
friendsofphp
Potential XXE security issue
2014-09-14 18:13:30
Potential XXE security issue
2014-09-14 18:13:30
cvelist
cvelist
CVE-2014-2053
2014-06-04 14:00:00
CVE-2014-9487
2017-10-17 14:00:00
ubuntucve
ubuntucve
CVE-2014-2053
2014-06-04 00:00:00
github
github
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
osv
osv
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
wordpress - security update
2014-08-09 00:00:00
wordpress - security update
2014-09-17 00:00:00
cve
cve
CVE-2014-2053
2014-06-04 14:55:03
CVE-2014-9487
2017-10-17 14:29:00
debiancve
debiancve
CVE-2014-2053
2014-06-04 14:55:03
wpvulndb
wpvulndb
WordPress 3.6 - 3.9.1 XXE in GetID3 Library
2014-09-16 18:19:44
nvd
nvd
CVE-2014-9487
2017-10-17 14:29:00
owncloud
owncloud
Server: XXE in multiple third party components
2014-07-03 02:00:00
XXE in multiple third party components - ownCloud
2014-07-03 18:22:45
openvas
openvas
ownCloud Multiple Vulnerabilities-02 (Jul 2014)
2014-07-03 00:00:00
Debian: Security Advisory (DLA-56-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3001-1 (wordpress - security update)
2014-08-09 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09
nessus
nessus
Debian DLA-56-1 : wordpress security update
2015-03-26 00:00:00
Debian DSA-3001-1 : wordpress - security update
2014-08-10 00:00:00
WordPress < 3.7.4 / 3.8.4 / 3.9.2 Multiple Vulnerabilities
2014-08-12 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.7
Confidence
High
EPSS
0.007
Percentile
80.8%
Related for NVD:CVE-2014-2053