NetSight
IP …
medium6.5

CVE-2014-0207

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote …

Impact

The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

Affected products

VendorProductAffected versions
Christos ZoulasFile
before 5.19
PhpPhp
before 5.3.29
from 5.4.0 before 5.4.30
from 5.5.0 before 5.5.14
OracleLinux
Version 7
OpensuseOpensuse
Version 11.4
DebianDebian Linux
Versions 7.0, 8.0

Weakness classification

CWE-119CWE-20

References