Description
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
Remediation
References
Related Vulnerabilities
WordPress Plugin Sitewide Notice WP Cross-Site Scripting (2.2)
WebLogic CVE-2021-35620 Vulnerability (CVE-2021-35620)
WordPress Plugin JH 404 Logger Cross-Site Scripting (1.1)
Oracle JRE CVE-2020-2754 Vulnerability (CVE-2020-2754)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2243)