NetSight
IP …
high7.3

CVE-2015-8865

The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, …

Impact

The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file.

Affected products

VendorProductAffected versions
PhpPhp
through 5.5.33
Versions 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4
AppleMac Os X
through 10.11.4

Weakness classification

CWE-119

References