NetSight
IP …
medium5.0

CVE-2014-1943

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indir…

Impact

Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.

Affected products

VendorProductAffected versions
Fine Free File ProjectFine Free File
before 5.17
PhpPhp
from 5.4.0 before 5.4.26
from 5.5.0 before 5.5.10
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.10
DebianDebian Linux
Versions 6.0, 7.0

Weakness classification

CWE-755

References