Published: 17/07/2012 Updated: 08/03/2014
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

file prior to 5.11 and libmagic allow remote malicious users to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.

Vulnerable Product Search on Vulmon Subscribe to Product

christos zoulas file

tim robbins libmagic

Vendor Advisories

The file type identification tool, file, and its associated library, libmagic, do not properly process malformed files in the Composite Document File (CDF) format, leading to crashes Note that after this update, file may return different detection results for CDF files (well-formed or not) The new detections are believed to be more accurate For ...
File could be made to crash if it processed a specially crafted file ...
A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file gd_ctxc in the GD component in PHP 54x before 5432 and 55x before 5516 does not ensu ...
Synopsis Moderate: file security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated file packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having Moderate securityimpact Commo ...