File Security Vulnerabilities and Issues — File CVE List

Lucene search

Christos ZoulasFile

3 matches found

CVE•added 2014/08/23 1:55 a.m.•269 views

CVE-2014-3587

Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists bec...

4.3CVSS8.5AI score0.06576EPSS

CVE•added 2014/07/09 11:7 a.m.•245 views

CVE-2014-0207

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

4.3CVSS8.9AI score0.11233EPSS

CVE•added 2012/07/17 9:55 p.m.•162 views

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.

4.3CVSS8.8AI score0.00269EPSS