// For flags

CVE-2014-3478

file: mconvert incorrect handling of truncated pascal string size

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.

Desbordamiento de buffer en la función mconvert en softmagic.c en file anterior a 5.19, utilizado en el componente Fileinfo en PHP anterior a 5.4.30 y 5.5.x anterior a 5.5.14, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de una cadena Pascal manipulada en una conversión FILE_PSTRING.

A buffer overflow flaw was found in the way the File Information (fileinfo) extension processed certain Pascal strings. A remote attacker able to make a PHP application using fileinfo convert a specially crafted Pascal string provided by an image file could cause that application to crash.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2014-05-14 CVE Reserved
  • 2014-07-09 CVE Published
  • 2024-02-19 EPSS Updated
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (21)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
<= 5.18
Search vendor "Christos Zoulas" for product "File" and version " <= 5.18"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.00
Search vendor "Christos Zoulas" for product "File" and version "5.00"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.01
Search vendor "Christos Zoulas" for product "File" and version "5.01"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.02
Search vendor "Christos Zoulas" for product "File" and version "5.02"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.03
Search vendor "Christos Zoulas" for product "File" and version "5.03"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.04
Search vendor "Christos Zoulas" for product "File" and version "5.04"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.05
Search vendor "Christos Zoulas" for product "File" and version "5.05"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.06
Search vendor "Christos Zoulas" for product "File" and version "5.06"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.07
Search vendor "Christos Zoulas" for product "File" and version "5.07"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.08
Search vendor "Christos Zoulas" for product "File" and version "5.08"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.09
Search vendor "Christos Zoulas" for product "File" and version "5.09"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.10
Search vendor "Christos Zoulas" for product "File" and version "5.10"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.11
Search vendor "Christos Zoulas" for product "File" and version "5.11"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.12
Search vendor "Christos Zoulas" for product "File" and version "5.12"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.13
Search vendor "Christos Zoulas" for product "File" and version "5.13"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.14
Search vendor "Christos Zoulas" for product "File" and version "5.14"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.15
Search vendor "Christos Zoulas" for product "File" and version "5.15"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.16
Search vendor "Christos Zoulas" for product "File" and version "5.16"
-
Affected
Christos Zoulas
Search vendor "Christos Zoulas"
File
Search vendor "Christos Zoulas" for product "File"
5.17
Search vendor "Christos Zoulas" for product "File" and version "5.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
<= 5.4.29
Search vendor "Php" for product "Php" and version " <= 5.4.29"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.0
Search vendor "Php" for product "Php" and version "5.4.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.1
Search vendor "Php" for product "Php" and version "5.4.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.2
Search vendor "Php" for product "Php" and version "5.4.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.3
Search vendor "Php" for product "Php" and version "5.4.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.4
Search vendor "Php" for product "Php" and version "5.4.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.5
Search vendor "Php" for product "Php" and version "5.4.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.6
Search vendor "Php" for product "Php" and version "5.4.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.7
Search vendor "Php" for product "Php" and version "5.4.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.8
Search vendor "Php" for product "Php" and version "5.4.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.9
Search vendor "Php" for product "Php" and version "5.4.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.10
Search vendor "Php" for product "Php" and version "5.4.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.11
Search vendor "Php" for product "Php" and version "5.4.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.12
Search vendor "Php" for product "Php" and version "5.4.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.12
Search vendor "Php" for product "Php" and version "5.4.12"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.12
Search vendor "Php" for product "Php" and version "5.4.12"
rc2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.13
Search vendor "Php" for product "Php" and version "5.4.13"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.13
Search vendor "Php" for product "Php" and version "5.4.13"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.14
Search vendor "Php" for product "Php" and version "5.4.14"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.14
Search vendor "Php" for product "Php" and version "5.4.14"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.15
Search vendor "Php" for product "Php" and version "5.4.15"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.16
Search vendor "Php" for product "Php" and version "5.4.16"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.17
Search vendor "Php" for product "Php" and version "5.4.17"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.18
Search vendor "Php" for product "Php" and version "5.4.18"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.19
Search vendor "Php" for product "Php" and version "5.4.19"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.20
Search vendor "Php" for product "Php" and version "5.4.20"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.21
Search vendor "Php" for product "Php" and version "5.4.21"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.22
Search vendor "Php" for product "Php" and version "5.4.22"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.23
Search vendor "Php" for product "Php" and version "5.4.23"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.24
Search vendor "Php" for product "Php" and version "5.4.24"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.25
Search vendor "Php" for product "Php" and version "5.4.25"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.26
Search vendor "Php" for product "Php" and version "5.4.26"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.27
Search vendor "Php" for product "Php" and version "5.4.27"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.4.28
Search vendor "Php" for product "Php" and version "5.4.28"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
alpha1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
alpha2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
alpha3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
alpha4
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
alpha5
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
alpha6
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
beta1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
beta2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
beta3
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
beta4
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
rc1
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.0
Search vendor "Php" for product "Php" and version "5.5.0"
rc2
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.1
Search vendor "Php" for product "Php" and version "5.5.1"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.2
Search vendor "Php" for product "Php" and version "5.5.2"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.3
Search vendor "Php" for product "Php" and version "5.5.3"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.4
Search vendor "Php" for product "Php" and version "5.5.4"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.5
Search vendor "Php" for product "Php" and version "5.5.5"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.6
Search vendor "Php" for product "Php" and version "5.5.6"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.7
Search vendor "Php" for product "Php" and version "5.5.7"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.8
Search vendor "Php" for product "Php" and version "5.5.8"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.9
Search vendor "Php" for product "Php" and version "5.5.9"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.10
Search vendor "Php" for product "Php" and version "5.5.10"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.11
Search vendor "Php" for product "Php" and version "5.5.11"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.12
Search vendor "Php" for product "Php" and version "5.5.12"
-
Affected
Php
Search vendor "Php"
Php
Search vendor "Php" for product "Php"
5.5.13
Search vendor "Php" for product "Php" and version "5.5.13"
-
Affected