10 matches found
file:magic_fuzzer: Heap-buffer-overflow in cdf_read_property_info
Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5226450584731648 Project: file Fuzzing Engine: honggfuzz Fuzz Target: magicfuzzer Job Type: honggfuzzasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000000f00 Crash...
file:magic_fuzzer: Crash in cdf_read_property_info
Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5677554623709184 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasani386file Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02353d80 Crash State:...
[SECURITY] [DLA 67-1] php5 security update
Package : php5 Version : 5.3.3-7+squeeze22 CVE ID : CVE-2014-3538 CVE-2014-3587 CVE-2014-3597 CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not sufficiently address the problem. A remote attacker could still cause a denial of service CPU consumption via a...
DLA-67-1 php5 - security update
Bulletin has no description...
Debian Security Advisory DSA 3008-1 (php5 - security update)
Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-3538It was discovered that the original fix for CVE-2013-7345 did not...
DSA-3008-1 php5 - security update
Bulletin has no description...
file: out of bounds read in CDF parser
A denial of service flaw was found in the way the File Information fileinfo extension parsed certain Composite Document Format CDF files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file...
php53 and php security update
5.3.3-27.1 - core: type confusion issue in phpinfo. CVE-2014-4721 - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712 - core: fix heap-based buffer overflow in DNS TXT record parsing. CVE-2014-4049 - core: unserialize SPL ArrayObject / SPLObjectStorage type confusion flaw...
Debian DSA-2943-1 : php5 - security update
Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development : - CVE-2014-0185 The default PHP FPM socket permission has been changed from 0666 to 0660 to mitigate a security vulnerability CVE-2014-0185 in PHP FPM that allowed any...