FI
Product
File
8
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add File to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-3478 | 6.5 | Jul 9 | Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote… Affected: through 5.18; 5.00; 5.01; 5.02; 5.03; 5.04; +13 more |
| CVE-2014-0207 | 6.5 | Jul 9 | The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a… Affected: before 5.19 |
| CVE-2012-1571 | 6.5 | Jul 17 | file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read… Affected: through 5.10 |
| CVE-2014-3587 | – | Aug 23 | Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows… Affected: through 5.19; 5.00; 5.01; 5.02; 5.03; 5.04; +14 more |
| CVE-2014-3538 | – | Jul 3 | file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a… Affected: through 5.18; 5.00; 5.01; 5.02; 5.03; 5.04; +13 more |
| CVE-2013-7345 | – | Mar 24 | The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows… Affected: before 5.15 |
| CVE-2009-3930 | – | Nov 10 | Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file… Affected: through 5.01; 3.30; 3.31; 3.32; 3.33; 3.34; +29 more |
| CVE-2009-1515 | – | May 4 | Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted… Affected: 5.00 |
Showing 8