NVD

Id
31666  
Name
CVE-2014-3478  
Description
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-07-09  
Modified Date
2016-11-28  
Seq
2014-3478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165957 31666 CVE-2014-3478 APPLE-SA-2015-04-08-2  View
165958 31666 CVE-2014-3478 openSUSE-SU-2014:1236  View
165959 31666 CVE-2014-3478 SSRT101681  View
165960 31666 CVE-2014-3478 [file] 20140612 file-5.19 is now available  View
165961 31666 CVE-2014-3478 RHSA-2014:1327  View
165962 31666 CVE-2014-3478 RHSA-2014:1765  View
165963 31666 CVE-2014-3478 RHSA-2014:1766  View
165964 31666 CVE-2014-3478 http://support.apple.com/kb/HT6443  View
165965 31666 CVE-2014-3478 DSA-2974  View
165966 31666 CVE-2014-3478 DSA-3021  View
165967 31666 CVE-2014-3478 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
165968 31666 CVE-2014-3478 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
165969 31666 CVE-2014-3478 http://www.php.net/ChangeLog-5.php  View
165970 31666 CVE-2014-3478 68239  View
165971 31666 CVE-2014-3478 https://bugs.php.net/bug.php?id=67410  View
165972 31666 CVE-2014-3478 https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08  View
165973 31666 CVE-2014-3478 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14413 JVNDB-2014-003288 PHP の Fileinfo コンポーネントで使用される file の softmagic.c 内の mconvert 関数におけるバッファオーバーフローの脆弱性 PHP の Fileinfo コンポーネントで使用される file の softmagic.c 内の mconvert 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3478 70766 CVE-2014-3478 31666 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003288.html 2014-06-26 2015-04-10 View