NetSight
IP …
medium5.0

CVE-2014-0238

The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial o…

Impact

The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.

Affected products

VendorProductAffected versions
PhpPhp
before 5.3.29
from 5.4.0 before 5.4.29
from 5.5.0 before 5.5.13
DebianDebian Linux
Versions 7.0, 8.0

Weakness classification

CWE-119

References