Lucene search
RootSSV:61847HistoryMar 19, 2014 - 12:00 a.m.
getID3() XML外部实体漏洞
2014-03-1900:00:00
Root
www.seebug.org
26
0.007 Low
EPSS
Percentile
78.6%
CVE ID：CVE-2014-2053
getID3()是一款从MP3等媒体文件中提取文件信息的php类，既可以提取也能修改文件的标签信息。
解析XML实体时的错误，可以被利用来如披露某些本地文件内容，或例如通过特制的使用iXML块的WAV文件用消耗过多的服务器资源。
0
getID3() 1.x
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
https://github.com/JamesHeinrich/getID3/commit/dc8549079a24bb0619b6124ef2df767704f8d0bc
Related
wpvulndb
wpvulndb
WordPress 3.6 - 3.9.1 XXE in GetID3 Library
2014-09-16 18:19:44
friendsofphp
friendsofphp
Potential XXE security issue
2014-09-14 18:13:30
Potential XXE security issue
2014-09-14 18:13:30
cvelist
cvelist
CVE-2014-2053
2014-06-04 14:00:00
CVE-2014-9487
2017-10-17 14:00:00
cve
cve
CVE-2014-2053
2014-06-04 14:55:00
CVE-2014-9487
2017-10-17 14:29:00
osv
osv
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
wordpress - security update
2014-09-17 00:00:00
wordpress - security update
2014-08-09 00:00:00
ubuntucve
ubuntucve
CVE-2014-2053
2014-06-04 00:00:00
debiancve
debiancve
CVE-2014-2053
2014-06-04 14:55:00
github
github
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
owncloud
owncloud
XXE in multiple third party components - ownCloud
2014-07-03 18:22:45
Server: XXE in multiple third party components
2014-07-03 02:00:00
openvas
openvas
ownCloud Multiple Vulnerabilities-02 (Jul 2014)
2014-07-03 00:00:00
Debian: Security Advisory (DLA-56-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3001-1)
2014-08-08 00:00:00
nessus
nessus
Debian DSA-3001-1 : wordpress - security update
2014-08-10 00:00:00
Debian DLA-56-1 : wordpress security update
2015-03-26 00:00:00
WordPress < 3.7.4 / 3.8.4 / 3.9.2 Multiple Vulnerabilities
2014-08-12 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:46