Description

file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.

Remediation

References

CVE-2014-0236

Related Vulnerabilities

WordPress Plugin All in One Webmaster Unspecified Vulnerability (11.0)

WordPress Plugin WordPress Comments Import & Export CSV Injection (2.0.4)

WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.6)

PHP Improper Input Validation Vulnerability (CVE-2014-9653)

Oracle JRE CVE-2013-1500 Vulnerability (CVE-2013-1500)

Severity

High

Classification

CVE-2014-0236 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities