Description
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/59329 ↗
- http://secunia.com/advisories/59418 ↗
- https://support.apple.com/HT204659 ↗
- https://bugs.php.net/bug.php?id=67327 ↗
- http://www-01.ibm.com/support/docview.wss?uid=swg21683486 ↗
- http://rhn.redhat.com/errata/RHSA-2014-1766.html ↗
- https://github.com/file/file/commit/f97486ef5dc3e8735440edc4fc8808c63e1a3ef0 ↗
- http://www.debian.org/security/2014/dsa-3021 ↗
- http://www.securityfocus.com/bid/67765 ↗
- http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html ↗
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html ↗
- http://secunia.com/advisories/59061 ↗
- http://www.php.net/ChangeLog-5.php ↗
- http://secunia.com/advisories/60998 ↗
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html ↗
- http://support.apple.com/kb/HT6443 ↗
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html ↗
- http://rhn.redhat.com/errata/RHSA-2014-1765.html ↗