Description

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Remediation

References

CVE-2014-0207

Related Vulnerabilities

WordPress Plugin WP CSV Unspecified Vulnerability (1.7.8.0)

WordPress Plugin Responsive WordPress Slider Cross-Site Scripting (2.2.0)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6634)

Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1614)

Apache HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-28615)

Severity

Medium

Classification

CVE-2014-0207 CWE-119

Tags

Missing Update Known Vulnerabilities