NVD

Id
29146  
Name
CVE-2014-0238  
Description
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-06-01  
Modified Date
2017-01-06  
Seq
2014-0238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154689 29146 CVE-2014-0238 APPLE-SA-2015-04-08-2  View
154690 29146 CVE-2014-0238 SUSE-SU-2014:0869  View
154691 29146 CVE-2014-0238 RHSA-2014:1765  View
154692 29146 CVE-2014-0238 RHSA-2014:1766  View
154693 29146 CVE-2014-0238 59061  View
154694 29146 CVE-2014-0238 59329  View
154695 29146 CVE-2014-0238 59418  View
154696 29146 CVE-2014-0238 60998  View
154697 29146 CVE-2014-0238 http://support.apple.com/kb/HT6443  View
154698 29146 CVE-2014-0238 http://www-01.ibm.com/support/docview.wss?uid=swg21683486  View
154699 29146 CVE-2014-0238 DSA-3021  View
154700 29146 CVE-2014-0238 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
154701 29146 CVE-2014-0238 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
154702 29146 CVE-2014-0238 http://www.php.net/ChangeLog-5.php  View
154703 29146 CVE-2014-0238 67765  View
154704 29146 CVE-2014-0238 https://bugs.php.net/bug.php?id=67327  View
154705 29146 CVE-2014-0238 https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0  View
154706 29146 CVE-2014-0238 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13841 JVNDB-2014-002716 PHP の Fileinfo コンポーネントの cdf.c の cdf_read_property_info 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の Fileinfo コンポーネントの cdf.c の cdf_read_property_info 関数には、サービス運用妨害 (無限ループまたは領域外メモリアクセス) 状態にされる脆弱性が存在します。 CVE-2014-0238 67639 CVE-2014-0238 29146 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002716.html 2014-05-29 2015-04-10 View