USN-2344-1

Dashboard / Vulnerabilities / USN-2344-1

USN-2344-1

Summary: php5 vulnerabilities

Details: It was discovered that the Fileinfo component in php5 contains an integer overflow. An attacker could use this flaw to cause a denial of service or possibly execute arbitrary code via a crafted CDF file. (CVE-2014-3587) It was discovered that the php_parserr function contains multiple buffer overflows. An attacker could use this flaw to cause a denial of service or possibly execute arbitrary code via crafted DNS records. (CVE-2014-3597)

References: https://ubuntu.com/security/notices/USN-2344-1, https://ubuntu.com/security/CVE-2014-3587, https://ubuntu.com/security/CVE-2014-3597