Lucene search

K
f5F5F5:K15272
HistoryMay 19, 2014 - 12:00 a.m.

K15272 : PHP Vulnerability CVE-2013-4636

2014-05-1900:00:00
my.f5.com
36

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.3%

Security Advisory Description

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object. (CVE-2013-4636)

Impact

None. No F5 products are vulnerable to CVE-2013-4636.

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.3%