CVE-2014-3478

Published: Jul 9, 2014Modified: May 6, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.

Affected (79)

Products: Christos Zoulas: File · Php: Php

Christos Zoulas

1 product

1 product

Configuration A

79 vulnerable

Vulnerable Software	Affected Versions
Christos Zoulas File	Up to 5.18
Christos Zoulas File	Version 5.00
Christos Zoulas File	Version 5.01
Christos Zoulas File	Version 5.02
Christos Zoulas File	Version 5.03
Christos Zoulas File	Version 5.04
Christos Zoulas File	Version 5.05
Christos Zoulas File	Version 5.06
Christos Zoulas File	Version 5.07
Christos Zoulas File	Version 5.08
Christos Zoulas File	Version 5.09
Christos Zoulas File	Version 5.10
Christos Zoulas File	Version 5.11
Christos Zoulas File	Version 5.12
Christos Zoulas File	Version 5.13
Christos Zoulas File	Version 5.14
Christos Zoulas File	Version 5.15
Christos Zoulas File	Version 5.16
Christos Zoulas File	Version 5.17
Php Php	Up to 5.4.29
Php Php	Version 5.4.0
Php Php	Version 5.4.10
Php Php	Version 5.4.11
Php Php	Version 5.4.12
Php Php	Version 5.4.12 rc1
Php Php	Version 5.4.12 rc2
Php Php	Version 5.4.13
Php Php	Version 5.4.13 rc1
Php Php	Version 5.4.14
Php Php	Version 5.4.14 rc1
Php Php	Version 5.4.15 rc1
Php Php	Version 5.4.16 rc1
Php Php	Version 5.4.17
Php Php	Version 5.4.18
Php Php	Version 5.4.19
Php Php	Version 5.4.1
Php Php	Version 5.4.20
Php Php	Version 5.4.21
Php Php	Version 5.4.22
Php Php	Version 5.4.23
Php Php	Version 5.4.24
Php Php	Version 5.4.25
Php Php	Version 5.4.26
Php Php	Version 5.4.27
Php Php	Version 5.4.28
Php Php	Version 5.4.2
Php Php	Version 5.4.3
Php Php	Version 5.4.4
Php Php	Version 5.4.5
Php Php	Version 5.4.6
Php Php	Version 5.4.7
Php Php	Version 5.4.8
Php Php	Version 5.4.9
Php Php	Version 5.5.0
Php Php	Version 5.5.0 alpha1
Php Php	Version 5.5.0 alpha2
Php Php	Version 5.5.0 alpha3
Php Php	Version 5.5.0 alpha4
Php Php	Version 5.5.0 alpha5
Php Php	Version 5.5.0 alpha6
Php Php	Version 5.5.0 beta1
Php Php	Version 5.5.0 beta2
Php Php	Version 5.5.0 beta3
Php Php	Version 5.5.0 beta4
Php Php	Version 5.5.0 rc1
Php Php	Version 5.5.0 rc2
Php Php	Version 5.5.10
Php Php	Version 5.5.11
Php Php	Version 5.5.12
Php Php	Version 5.5.13
Php Php	Version 5.5.1
Php Php	Version 5.5.2
Php Php	Version 5.5.3
Php Php	Version 5.5.4
Php Php	Version 5.5.5
Php Php	Version 5.5.6
Php Php	Version 5.5.7
Php Php	Version 5.5.8
Php Php	Version 5.5.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (38)

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=141017844705317&w=2

Source: secalert@redhat.com

http://mx.gw.com/pipermail/file/2014/001553.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1327.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1765.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-1766.html

Source: secalert@redhat.com

http://secunia.com/advisories/59794

Source: secalert@redhat.com

http://secunia.com/advisories/59831

Source: secalert@redhat.com

http://support.apple.com/kb/HT6443

Source: secalert@redhat.com

http://www.debian.org/security/2014/dsa-2974

Source: secalert@redhat.com

http://www.debian.org/security/2014/dsa-3021

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: secalert@redhat.com

http://www.php.net/ChangeLog-5.php

Source: secalert@redhat.com

http://www.securityfocus.com/bid/68239

Source: secalert@redhat.com

https://bugs.php.net/bug.php?id=67410

Source: secalert@redhat.com

Patch

https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08

Source: secalert@redhat.com

ExploitPatch

https://support.apple.com/HT204659

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=141017844705317&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://mx.gw.com/pipermail/file/2014/001553.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1327.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1765.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-1766.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59794

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59831

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT6443

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2974

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-3021

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/ChangeLog-5.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/68239

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.php.net/bug.php?id=67410

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://support.apple.com/HT204659

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.