Lucene search

[email protected]CVE-2013-4636

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-4636

2022-10-0316:14:56

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-4636

php 5.4.x

fileinfo component

denial of service

invalid pointer dereference

application crash

mp3 file

mime type detection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

Affected configurations

NVD

Node

phpphpMatch5.4.0

phpphpMatch5.4.1

phpphpMatch5.4.2

phpphpMatch5.4.3

phpphpMatch5.4.4

phpphpMatch5.4.5

phpphpMatch5.4.6

phpphpMatch5.4.7

phpphpMatch5.4.8

phpphpMatch5.4.9

phpphpMatch5.4.10

phpphpMatch5.4.11

phpphpMatch5.4.12

phpphpMatch5.4.13

phpphpMatch5.4.14

phpphpMatch5.4.15

CPENameOperatorVersion
php:phpphpeq5.4.0
php:phpphpeq5.4.1
php:phpphpeq5.4.2
php:phpphpeq5.4.3
php:phpphpeq5.4.4
php:phpphpeq5.4.5
php:phpphpeq5.4.6
php:phpphpeq5.4.7
php:phpphpeq5.4.8
php:phpphpeq5.4.9

CPE	Name	Operator	Version
php:php	php	eq	5.4.0
php:php	php	eq	5.4.1
php:php	php	eq	5.4.2
php:php	php	eq	5.4.3
php:php	php	eq	5.4.4
php:php	php	eq	5.4.5
php:php	php	eq	5.4.6
php:php	php	eq	5.4.7
php:php	php	eq	5.4.8
php:php	php	eq	5.4.9