Description

file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.

Remediation

References

CVE-2014-0236

Related Vulnerabilities

PHP Other Vulnerability (CVE-2015-8616)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42112)

WordPress Plugin MailUp newsletter sign-up form Security Bypass (1.3.2)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5909)

WordPress Plugin Import Export WordPress Users CSV Injection (1.3.1)

Severity

High

Classification

CVE-2014-0236 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities