Description

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Remediation

References

CVE-2014-0207

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.10)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.30)

WordPress Plugin Ocean Extra Security Bypass (1.5.8)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4572)

Microsoft SQL Server CVE-2023-21718 Vulnerability (CVE-2023-21718)

Severity

Medium

Classification

CVE-2014-0207 CWE-119

Tags

Missing Update Known Vulnerabilities