Lucene search
Ubuntu.comUB:CVE-2014-3587HistoryAug 22, 2014 - 12:00 a.m.
CVE-2014-3587
2014-08-2200:00:00
ubuntu.com
ubuntu.com
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.08 Low
EPSS
Percentile
94.2%
Integer overflow in the cdf_read_property_info function in cdf.c in file
through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and
5.5.x before 5.5.16, allows remote attackers to cause a denial of service
(application crash) via a crafted CDF file. NOTE: this vulnerability
exists because of an incomplete fix for CVE-2012-1571.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | file | < 5.03-5ubuntu1.4 | UNKNOWN |
| ubuntu | 12.04 | noarch | file | < 5.09-2ubuntu0.5 | UNKNOWN |
| ubuntu | 14.04 | noarch | file | < 1:5.14-2ubuntu3.2 | UNKNOWN |
| ubuntu | 10.04 | noarch | php5 | < 5.3.2-1ubuntu4.27 | UNKNOWN |
| ubuntu | 12.04 | noarch | php5 | < 5.3.10-1ubuntu3.14 | UNKNOWN |
| ubuntu | 14.04 | noarch | php5 | < 5.5.9+dfsg-1ubuntu4.4 | UNKNOWN |
Related
securityvulns
securityvulns
file utility memory corruption
2014-09-03 00:00:00
[ MDVSA-2014:167 ] file
2014-09-03 00:00:00
[USN-2344-1] PHP vulnerabilities
2014-09-15 00:00:00
cve
cve
CVE-2014-3587
2014-08-23 01:55:00
CVE-2012-1571
2012-07-17 21:55:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-398)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-415)
2015-09-08 00:00:00
Ubuntu: Security Advisory (USN-2369-1)
2014-10-03 00:00:00
nessus
nessus
Amazon Linux AMI : file (ALAS-2014-398)
2014-10-12 00:00:00
Fedora 20 : file-5.19-4.fc20 (2014-9712)
2014-08-25 00:00:00
Amazon Linux AMI : php55 (ALAS-2014-415)
2014-10-12 00:00:00
prion
prion
Integer overflow
2014-08-23 01:55:00
Out-of-bounds
2012-07-17 21:55:00
amazon
amazon
Medium: file
2014-09-03 14:38:00
Medium: php55
2014-09-18 21:03:00
debiancve
debiancve
CVE-2014-3587
2014-08-23 01:55:00
CVE-2012-1571
2012-07-17 21:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: file-5.19-4.fc20
2014-08-24 02:55:59
[SECURITY] Fedora 20 Update: php-5.5.16-1.fc20
2014-09-02 06:40:37
[SECURITY] Fedora 19 Update: php-5.5.16-1.fc19
2014-09-02 06:47:45
mageia
mageia
Updated php packages fix multiple security vulnerabilities
2014-09-05 13:07:37
Updated file packages fix CVE-2014-3587
2014-08-27 03:04:56
checkpoint_advisories
checkpoint_advisories
PHP Fileinfo cdf_read_property_info Denial of Service (CVE-2014-3587)
2014-10-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:04:19
Denial Of Service
2019-01-15 08:58:13
Denial Of Service (DoS)
2019-05-02 05:04:17
ubuntu
ubuntu
file vulnerability
2014-10-03 00:00:00
PHP vulnerabilities
2014-09-10 00:00:00
file vulnerabilities
2014-02-26 00:00:00
f5
f5
SOL16875 - file vulnerability CVE-2012-1571
2015-07-02 00:00:00
K16875 : file vulnerability CVE-2012-1571
2015-07-02 00:00:00
debian
debian
[SECURITY] [DSA 2422-2] file regression fix
2012-05-09 18:23:22
[SECURITY] [DLA 50-1] file security update
2014-09-10 15:52:03
[SECURITY] [DLA 67-1] php5 security update
2014-09-30 07:41:52
gentoo
gentoo
file: Denial of service
2012-09-26 00:00:00
ubuntucve
ubuntucve
CVE-2012-1571
2012-07-17 00:00:00
redhat
redhat
(RHSA-2014:1326) Moderate: php53 and php security update
2014-09-30 00:00:00
(RHSA-2014:1327) Moderate: php security update
2014-09-30 00:00:00
(RHSA-2014:1606) Moderate: file security and bug fix update
2014-10-14 00:00:00
centos
centos
php, php53 security update
2014-09-30 10:27:47
php security update
2014-09-30 10:59:18
file, python security update
2016-05-16 10:13:44
oraclelinux
oraclelinux
php53 and php security update
2014-09-30 00:00:00
file security, bug fix, and enhancement update
2016-05-12 00:00:00
php security update
2014-09-30 00:00:00
kitploit
kitploit
Versionscan - A PHP Version Scanner For Reporting Possible Vulnerabilities
2019-05-21 21:17:00
osv
osv
file - security update
2014-09-10 00:00:00
php5 - security update
2014-09-30 00:00:00
php5 - security update
2014-08-21 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3)
2014-06-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:16.file
2014-06-24 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
2018-06-16 21:43:49
Security Bulletin: File vulnerabilities affect IBM SmartClound Entry
2020-07-19 00:49:12
Security Bulletin: Multiple vulnerabilities in file affect PowerKVM
2018-06-18 01:30:43
slackware
slackware
[slackware-security] php
2014-09-04 22:00:56
suse
suse
Security update for php53 (important)
2016-09-16 21:09:09
Security update for php5 (important)
2016-09-28 15:09:48
Security update for php5 (important)
2016-10-04 17:11:09
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.08 Low
EPSS
Percentile
94.2%
Related for UB:CVE-2014-3587