Description

Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.

Remediation

References

CVE-2014-3587

Related Vulnerabilities

Oracle Database Server CVE-2014-6467 Vulnerability (CVE-2014-6467)

Mailman Other Vulnerability (CVE-2001-0290)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9665)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1447)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-3384)

Severity

Medium

Classification

CVE-2014-3587

Tags

Missing Update Known Vulnerabilities