NVD

Id
25991  
Name
CVE-2015-4604  
Description
The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-05-16  
Modified Date
2016-11-29  
Seq
2015-4604  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
137394 25991 CVE-2015-4604 http://git.php.net/?p=php-src.git;a=commit;h=f938112c495b0d26572435c0be73ac0bfe642ecd  View
137395 25991 CVE-2015-4604 http://php.net/ChangeLog-5.php  View
137396 25991 CVE-2015-4604 RHSA-2015:1135  View
137397 25991 CVE-2015-4604 RHSA-2015:1186  View
137398 25991 CVE-2015-4604 RHSA-2015:1187  View
137399 25991 CVE-2015-4604 [oss-security] 20150616 Re: CVE Request: various issues in PHP  View
137400 25991 CVE-2015-4604 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
137401 25991 CVE-2015-4604 75241  View
137402 25991 CVE-2015-4604 https://bugs.php.net/bug.php?id=68819  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11839 JVNDB-2015-007159 PHP の Fileinfo コンポーネントで使用される file の softmagic.c の mget 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の Fileinfo コンポーネントで使用される file の softmagic.c の mget 関数は、特定のポインタの関係性を適切に保持しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2015-4604 81829 CVE-2015-4604 25991 5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007159.html 2015-04-16 2016-05-19 View