Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2014-3587 — MEDIUM severity vulnerability | Release Alert

CVE-2014-3587

4.3

MEDIUMCVSS v2

Published

August 23, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.

php/php-src

GitHubThe PHP Interpreter

NVD

file/file

GitHubRead-only mirror of file CVS repository, updated every half hour. NOTE: do not make pull requests here, nor comment any commits, submit them usual way to bug tracker or to the mailing list. Maintainer(s) are not tracking this git mirror.

= 5.00, = 5.04, = 5.10, = 5.02, = 5.03, = 5.11, = 5.16, = 5.07, = 5.18, = 5.01, = 5.08, = 5.17, = 5.14, = 5.05, = 5.12, = 5.13, <= 5.19, = 5.09, = 5.06, = 5.15NVD

php

More on this CVE

NVD↗GitHub Advisory↗

NPMAllows you to run PHP code in Node.js in various ways.

= 5.5.0, = 5.4.12, = 5.4.15, <= 5.4.31, = 5.5.14, = 5.4.14, = 5.4.8, = 5.4.19, = 5.5.5, = 5.5.1, = 5.4.17, = 5.5.7, = 5.4.16, = 5.4.23, = 5.4.24, = 5.4.30, = 5.5.8, = 5.5.13, = 5.4.10, = 5.4.11, = 5.4.21, = 5.4.22, = 5.4.9, = 5.5.3, = 5.5.15, = 5.4.2, = 5.4.27, = 5.4.28, = 5.4.6, = 5.5.4, = 5.4.26, = 5.4.5, = 5.5.6, = 5.5.12, = 5.5.11, = 5.4.0, = 5.5.9, = 5.4.20, = 5.4.29, = 5.4.3, = 5.5.2, = 5.4.1, = 5.4.13, = 5.4.7, = 5.5.10, = 5.4.18, = 5.4.25, = 5.4.4NVD

php

Python Package IndexHandle some of the strange standards in PHP projects