NVD

Id
30724  
Name
CVE-2014-2270  
Description
softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-03-14  
Modified Date
2014-11-18  
Seq
2014-2270  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161901 30724 CVE-2014-2270 http://bugs.gw.com/view.php?id=313  View
161902 30724 CVE-2014-2270 openSUSE-SU-2014:0364  View
161903 30724 CVE-2014-2270 openSUSE-SU-2014:0367  View
161904 30724 CVE-2014-2270 openSUSE-SU-2014:0435  View
161905 30724 CVE-2014-2270 RHSA-2014:1765  View
161906 30724 CVE-2014-2270 [oss-security] 20140303 CVE Request: file: crashes when checking softmagic for some corrupt PE executables  View
161907 30724 CVE-2014-2270 [oss-security] 20140305 Re: CVE Request: file: crashes when checking softmagic for some corrupt PE executables  View
161908 30724 CVE-2014-2270 [oss-security] 20140305 Re: CVE Request: file: crashes when checking softmagic for some corrupt PE executables  View
161909 30724 CVE-2014-2270 http://support.apple.com/kb/HT6443  View
161910 30724 CVE-2014-2270 DSA-2873  View
161911 30724 CVE-2014-2270 http://www.php.net/ChangeLog-5.php  View
161912 30724 CVE-2014-2270 USN-2162-1  View
161913 30724 CVE-2014-2270 USN-2163-1  View
161914 30724 CVE-2014-2270 https://github.com/file/file/commit/447558595a3650db2886cd2f416ad0beba965801  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12826 JVNDB-2014-001701 file および libmagic の softmagic.c におけるサービス運用妨害 (DoS) の脆弱性 file および libmagic の softmagic.c には、サービス運用妨害 (メモリ領域外へのアクセスおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-2270 69557 CVE-2014-2270 30724 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001701.html 2014-01-08 2014-11-28 View