CVE-2014-3479 The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows re...
MediumCVSS 4.3
EPSS 14.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/file(Debian:12) | < 1:5.19-1 | 1:5.19-1 |
| debian/file(Debian:13) | < 1:5.19-1 | 1:5.19-1 |
| debian/file(Debian:14) | < 1:5.19-1 | 1:5.19-1 |
| file project file | < 5.19 | 5.19 |
| PHP | < 5.3.29 | 5.3.29 |
| PHP | >= 5.4.0, < 5.4.30 | 5.4.30 |
| PHP | >= 5.5.0, < 5.5.14 | 5.5.14 |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| oracle linux | = 7 | No fix listed |
References
- Debian Security Tracker CVE-2014-3479 vendor-advisory
- APPLE-SA-2015-04-08-2 broken-link mailing-list vendor-advisory
- openSUSE-SU-2014:1236 mailing-list third-party-advisory vendor-advisory
- HPSBUX03102 issue-tracking third-party-advisory vendor-advisory
- [file] 20140612 file-5.19 is now available broken-link mailing-list
- RHSA-2014:1765 third-party-advisory vendor-advisory
- RHSA-2014:1766 third-party-advisory vendor-advisory
- 59794 not-applicable third-party-advisory
- 59831 not-applicable third-party-advisory
- support.apple.com third-party-advisory
- DSA-2974 third-party-advisory vendor-advisory
- DSA-3021 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- www.php.net release-notes vendor-advisory
- 68241 third-party-advisory vdb-entry
- bugs.php.net issue-tracking patch vendor-advisory
- github.com patch third-party-advisory
- support.apple.com third-party-advisory