Summary
This host is running PHP and is prone denial of service vulnerability.
Impact
Successful exploitation could allow attackers to cause denial of service (invalid pointer dereference and application crash) via an MP3 file.
Impact Level: Application
Solution
Upgrade to PHP 5.4.16 or later,
For updates refer to http://www.php.net/downloads.php
Insight
Flaw in 'mget' function in libmagic/softmagic.c, which triggers incorrect MIME type detection during access to an finfo object.
Affected
PHP version before 5.4.X before 5.4.16
References
Severity
Classification
-
CVE CVE-2013-4636 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
Related Vulnerabilities