Description

softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

Remediation

References

CVE-2014-2270

Related Vulnerabilities

WordPress Plugin Integration for Gravity Forms and Pipedrive Cross-Site Scripting (1.0.6)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (5.1.2)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-4315)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3818)

WordPress Plugin Knews Multilingual Newsletters 'ff' Parameter Cross-Site Scripting (1.1.0)

Severity

Medium

Classification

CVE-2014-2270 CWE-119

Tags

Missing Update Known Vulnerabilities