CVE-2012-1571

Synopsis Moderate: file security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated file packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having Moderate securityimpact Commo ...

File could be made to crash if it processed a specially crafted file ...

The file type identification tool, file, and its associated library, libmagic, do not properly process malformed files in the Composite Document File (CDF) format, leading to crashes Note that after this update, file may return different detection results for CDF files (well-formed or not) The new detections are believed to be more accurate For ...

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file gd_ctxc in the GD component in PHP 54x before 5432 and 55x before 5516 does not ensu ...