« List of all CVEs

CVE-2014-3480

Published: 7/9/2014 Last updated: 8/6/2024 Reserved: 5/14/2014

The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (2)

conf-libmagic magic

Products affected (1)

Product	Vendor	Version
n/a	n/a	< 15.1X53-D235

References (38)