Description

The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

Remediation

References

CVE-2014-0237

Related Vulnerabilities

MediaWiki Other Vulnerability (CVE-2004-2152)

WordPress Pingback Source URI Denial of Service and Information Disclosure Vulnerabilities (0.6.2 - 2.1.3)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11813)

WordPress Plugin Checklist Cross-Site Scripting (1.1.5)

MySQL CVE-2015-0433 Vulnerability (CVE-2015-0433)

Severity

Medium

Classification

CVE-2014-0237

Tags

Missing Update Known Vulnerabilities