Lucene search

[email protected]CVE-2014-9652

HistoryMar 30, 2015 - 10:59 a.m.

CVE-2014-9652

2015-03-3010:59:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-9652

mconvert function

softmagic.c

file

php

denial of service

remote attackers

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.089 Low

EPSS

Percentile

94.6%

JSON

The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.

Affected configurations

NVD

Node

phpphpRange≤5.4.36

phpphpMatch5.5.0

phpphpMatch5.5.0alpha1

phpphpMatch5.5.0alpha2

phpphpMatch5.5.0alpha3

phpphpMatch5.5.0alpha4

phpphpMatch5.5.0alpha5

phpphpMatch5.5.0alpha6

phpphpMatch5.5.0beta1

phpphpMatch5.5.0beta2

phpphpMatch5.5.0beta3

phpphpMatch5.5.0beta4

phpphpMatch5.5.0rc1

phpphpMatch5.5.0rc2

phpphpMatch5.5.1

phpphpMatch5.5.2

phpphpMatch5.5.3

phpphpMatch5.5.4

phpphpMatch5.5.5

phpphpMatch5.5.6

phpphpMatch5.5.7

phpphpMatch5.5.8

phpphpMatch5.5.9

phpphpMatch5.5.10

phpphpMatch5.5.11

phpphpMatch5.5.12

phpphpMatch5.5.13

phpphpMatch5.5.14

phpphpMatch5.5.15

phpphpMatch5.5.16

phpphpMatch5.5.17

phpphpMatch5.5.18

phpphpMatch5.5.19

phpphpMatch5.5.20

phpphpMatch5.6.0alpha1

phpphpMatch5.6.0alpha2

phpphpMatch5.6.0alpha3

phpphpMatch5.6.0alpha4

phpphpMatch5.6.0alpha5

phpphpMatch5.6.0beta1

phpphpMatch5.6.0beta2

phpphpMatch5.6.0beta3

phpphpMatch5.6.0beta4

phpphpMatch5.6.1

phpphpMatch5.6.2

phpphpMatch5.6.3

phpphpMatch5.6.4

Node

file_projectfileRange≤5.20

CPENameOperatorVersion
php:phpphple5.4.36
php:phpphpeq5.5.0
php:phpphpeq5.5.1
php:phpphpeq5.5.2
php:phpphpeq5.5.3
php:phpphpeq5.5.4
php:phpphpeq5.5.5
php:phpphpeq5.5.6
php:phpphpeq5.5.7
php:phpphpeq5.5.8

CPE	Name	Operator	Version
php:php	php	le	5.4.36
php:php	php	eq	5.5.0
php:php	php	eq	5.5.1
php:php	php	eq	5.5.2
php:php	php	eq	5.5.3
php:php	php	eq	5.5.4
php:php	php	eq	5.5.5
php:php	php	eq	5.5.6
php:php	php	eq	5.5.7
php:php	php	eq	5.5.8