Description
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
Remediation
References
Related Vulnerabilities
WordPress Plugin Zip Attachments Arbitrary File Download (1.4)
WordPress Plugin WordPress Download Manager Unspecified Vulnerability (2.9.96)
PHP Use After Free Vulnerability (CVE-2016-6290)
MySQL CVE-2019-2801 Vulnerability (CVE-2019-2801)
WordPress Plugin Browser and Operating System Finder Cross-Site Request Forgery (1.1)