CVE-2014-1943 – file: unrestricted recursion in handling of indirect type rules

https://notcve.org/view.php?id=CVE-2014-1943

18 Feb 2014 — Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file. Fine Free File anterior a 5.17 permite a atacantes dependientes de contexto causar una denegación de servicio (recursión infinita, consumo de CPU y caída) a través de un valor manipulado de desplazamiento indirecto en el "magic" de un archivo. A denial of service flaw was found in the way the File Information (... • http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html • CWE-755: Improper Handling of Exceptional Conditions CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •