SUSE CVE-2019-18218

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

PT-2021-27794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions cdf read property info, cdf unpack summary info, and cdf check summary info...

PT-2021-27769

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including cdf read property info, cdf unpack summary...

PT-2020-21804

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the functions cdf read property info, cdf unpack summary info, and cdf file...

The vulnerability of the cdf_readproperty_info function in the file classification tool allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cdfreadpropertyinfo function of the file classification tool is related to a buffer overflow error data exceeding 4 bytes. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

PT-2019-5102

Name of the Vulnerable Software and Affected Versions file versions through 5.37 Description The issue is related to a heap-based buffer overflow error in the cdf read property info function, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and...

file: incomplete fix for CVE-2012-1571 in cdf_read_property_info

It was found that the fix for CVE-2012-1571 was incomplete; the File Information fileinfo extension did not correctly parse certain Composite Document Format CDF files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file...

UBUNTU-CVE-2014-3487

The cdfreadpropertyinfo function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service application crash via a crafted CDF file...

PT-2014-1425

Name of the Vulnerable Software and Affected Versions file versions through 5.19 PHP versions prior to 5.4.32 PHP versions 5.5.x prior to 5.5.16 Description The issue is related to an integer overflow in the cdf read property info function in cdf.c in the file component, as used in the Fileinfo...