Описание
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.4.15-1ubuntu3 |
| lucid | not-affected | 5.3.2-1ubuntu4.19 |
| precise | not-affected | 5.3.10-1ubuntu3.6 |
| quantal | not-affected | 5.4.6-1ubuntu1.2 |
| raring | not-affected | 5.4.9-4ubuntu2.1 |
| upstream | released | 5.5.0 |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
The mget function in libmagic/softmagic.c in the Fileinfo component in ...
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
Уязвимость функции mget интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2