Security Advisory

CVE-2014-3478

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-07-09 10:00:00

Last updated 2025-12-04 20:26:53

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.

← Browse all CVEs View on cve.org ↗