Описание
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra-legacy/trusty | not-affected | |
| precise | not-affected | |
| trusty | not-affected | |
| trusty/esm | not-affected | |
| upstream | needs-triage | |
| utopic | not-affected | |
| vivid | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.6.9+dfsg-1ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 5.5.9+dfsg-1ubuntu4.9 |
| precise | not-affected | 5.3.10-1ubuntu3.18 |
| trusty | not-affected | 5.5.9+dfsg-1ubuntu4.9 |
| trusty/esm | not-affected | 5.5.9+dfsg-1ubuntu4.9 |
| upstream | released | 5.6.9+dfsg-1 |
| utopic | not-affected | 5.5.12+dfsg-2ubuntu4.4 |
| vivid | released | 5.6.4+dfsg-4ubuntu6.2 |
Показывать по
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo ...
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.
Уязвимость интерпретатора PHP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
5 Medium
CVSS2
7.5 High
CVSS3