Mandriva Linux Security Advisory : file (MDVSA-2014:116)

Updated file packages fix security vulnerabilities : A flaw was found in the way file's Composite Document Files CDF format parser handle CDF files with many summary info entries. The cdfunpacksummaryinfo function unnecessarily repeatedly read the info from the same offset. This led to many...

Mandriva Linux Security Advisory : php (MDVSA-2014:115)

Updated php packages fix security vulnerabilities : A flaw was found in the way file's Composite Document Files CDF format parser handle CDF files with many summary info entries. The cdfunpacksummaryinfo function unnecessarily repeatedly read the info from the same offset. This led to many...

Updated php packages fix CVE-2014-0237-8

Updated php packages fix security vulnerabilities: A flaw was found in the way file's Composite Document Files CDF format parser handle CDF files with many summary info entries. The cdfunpacksummaryinfo function unnecessarily repeatedly read the info from the same offset. This led to many...

Updated file packages fix CVE-2014-0237-8

Updated file packages fix security vulnerabilities: A flaw was found in the way file's Composite Document Files CDF format parser handle CDF files with many summary info entries. The cdfunpacksummaryinfo function unnecessarily repeatedly read the info from the same offset. This led to many...

Debian DSA-2943-1 : php5 - security update

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development : - CVE-2014-0185 The default PHP FPM socket permission has been changed from 0666 to 0660 to mitigate a security vulnerability CVE-2014-0185 in PHP FPM that allowed any...

PHP 5.4.x < 5.4.29 'src/cdf.c' Multiple Vulnerabilities

According to its banner, the version of PHP 5.4.x installed on the remote host is a version prior to 5.4.29. It is, therefore, affected by the following vulnerabilities : - A flaw exists with the 'cdfunpacksummaryinfo' function within 'src/cdf.c' where multiple fileprintf calls occur when handlin...

DEBIAN-CVE-2014-0238

The cdfreadpropertyinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service infinite loop or out-of-bounds memory access via a vector that 1 has zero length or 2 is too long...

UBUNTU-CVE-2014-0238

The cdfreadpropertyinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service infinite loop or out-of-bounds memory access via a vector that 1 has zero length or 2 is too long...

PT-2014-1422 · Php +7 · Php +7

Name of the Vulnerable Software and Affected Versions: file versions prior to 5.19 PHP versions prior to 5.4.30 and 5.5.x prior to 5.5.14 Description: The issue exists in the cdf check stream offset function due to the use of incorrect sector-size data. This allows remote attackers to cause a...

PT-2014-1417

Name of the Vulnerable Software and Affected Versions file versions prior to 5.19 PHP versions prior to 5.4.30 PHP 5.5.x versions prior to 5.5.14 Description The issue allows remote attackers to cause a denial of service, leading to application termination. This can be achieved through specially...

DSA-2943-1 php5 - security update

Bulletin has no description...

UBUNTU-CVE-2014-0237

The cdfunpacksummaryinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service performance degradation by triggering many fileprintf calls...

jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

Format string

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

CVE-2012-0213

The CVE-2012-0213 vulnerability resides in Apache POI 3.8 and earlier, specifically UnhandledDataStructure.java, where crafted CDF/CFBF data can cause a denial of service (OutOfMemoryError). IBM and vendor advisories consistently tie this CVE to Apache POI loaded in IBM QRadar SIEM and related IB...

Mandriva Update for file MDVSA-2012:035 (file)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for file MDVSA-2012:035 (file)

Check for the Version of file OpenVAS Vulnerability Test Mandriva Update for file MDVSA-2012:035 file Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Out-of-bounds

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

CVE-2012-1571 describes DoS via crafted CDF files that trigger out-of-bounds read or invalid pointer dereference in the File Information (fileinfo) component (libmagic) used by file and PHP. Public Advisories confirm the issue arises from an incomplete fix and that affected products include the f...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...