CVE-2014-3479
09.07.2014, 11:07
The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| file_project | file | 𝑥 < 5.19 |
| php | php | 𝑥 < 5.3.29 |
| php | php | 5.4.0 ≤ 𝑥 < 5.4.30 |
| php | php | 5.5.0 ≤ 𝑥 < 5.5.14 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| opensuse | opensuse | 11.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References