CVE Feed

Dashboard / CVE / CVE-2014-9652

CVE-2014-9652

The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.

Published:Nov 11, 2014

Last Modified:Apr 12, 2025

EPS:Mar 30, 2015

EPSS Score:0.04187

CVSS Score:5

Affected Products

Vendor

Product

Action

Vendor

File Project

Product

File

File Project

File

Vendor

Php

Product

Php

Php

Php

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Rhel Software Collections

Redhat

Rhel Software Collections

Exploits

No exploit reference

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-125 Out-of-bounds Read

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-540 Overread Buffers

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

Related CVEs

CVE-2022-48554 (CVSS 5.5) — File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of a…

CVE-2019-18218 (CVSS 7.8) — cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, whic…

CVE-2019-8905 (CVSS 4.4) — do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_print…

CVE-2019-8904 (CVSS 8.8) — do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf…

CVE-2019-8906 (CVSS 4.4) — do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.…

CVE-2019-8907 (CVSS 8.8) — do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (sta…

CVE-2018-10360 (CVSS 6.5) — The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of…

CVE-2017-1000249 (CVSS 5.5) — An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attack…

CVE-2014-9620 (CVSS 5) — The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large numb…

CVE-2014-9621 (CVSS 5) — The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long strin…

References

http://bugs.gw.com/view.php?id=398

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html

http://marc.info/?l=bugtraq&m=143748090628601&w=2

http://marc.info/?l=bugtraq&m=144050155601375&w=2

http://openwall.com/lists/oss-security/2015/02/05/12

http://php.net/ChangeLog-5.php

http://rhn.redhat.com/errata/RHSA-2015-1053.html

http://rhn.redhat.com/errata/RHSA-2015-1066.html

http://rhn.redhat.com/errata/RHSA-2015-1135.html

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

http://www.securityfocus.com/bid/72505

https://bugs.php.net/bug.php?id=68735

https://bugs.php.net/patch-display.php?bug=68735&patch=bug68735.patch&revision=1420309079

https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158

https://security.gentoo.org/glsa/201701-42

https://support.apple.com/HT205267

http://bugs.gw.com/view.php?id=398

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html

http://marc.info/?l=bugtraq&m=143748090628601&w=2

http://marc.info/?l=bugtraq&m=144050155601375&w=2

http://openwall.com/lists/oss-security/2015/02/05/12

http://php.net/ChangeLog-5.php

http://rhn.redhat.com/errata/RHSA-2015-1053.html

http://rhn.redhat.com/errata/RHSA-2015-1066.html

http://rhn.redhat.com/errata/RHSA-2015-1135.html

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

http://www.securityfocus.com/bid/72505

https://bugs.php.net/bug.php?id=68735

https://bugs.php.net/patch-display.php?bug=68735&patch=bug68735.patch&revision=1420309079

https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158

https://security.gentoo.org/glsa/201701-42

https://support.apple.com/HT205267

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High