Description

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

Remediation

References

CVE-2014-2053

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2002-2012)

MySQL Other Vulnerability (CVE-2006-4226)

Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2004-0150)

WordPress Plugin Cherry Multiple Vulnerabilities (1.2.6)

WordPress Comment Post Cross-Site Scripting Vulnerability (2.0)

Severity

High

Classification

CVE-2014-2053

Tags

Missing Update Known Vulnerabilities