CVE-2014-3487

EPSS 14.5%

發布日:2014/7/9修改日:2026/4/28

描述

The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

受影響套件(1)

Debian/filefrom 0, < 1:5.19-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3487