Description

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.

Remediation

References

CVE-2014-1943

Related Vulnerabilities

Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-10795)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Cross-Site Scripting (2.0.1)

UAParser.js Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-4229)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-38268)

Grafana Incorrect Authorization Vulnerability (CVE-2022-21713)

Severity

Medium

Classification

CVE-2014-1943 CWE-755

Tags

Missing Update Known Vulnerabilities