VYPR

File

by File Project

Source repositories

CVEs (36)

  • CVE-2014-9621Jan 21, 2015
    File Project
    File
    risk 0.00cvss —epss 0.03

    The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.

  • CVE-2014-9620Jan 21, 2015
    File Project
    File
    risk 0.00cvss —epss 0.05

    The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.

  • CVE-2014-8117Dec 17, 2014
    File Project
    File
    risk 0.00cvss —epss 0.06

    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.

  • CVE-2014-8116Dec 17, 2014
    File Project
    File
    risk 0.00cvss —epss 0.04

    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.

  • CVE-2014-3710Nov 5, 2014
    PHP
    PHP
    risk 0.00cvss —epss 0.14

    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted…

  • CVE-2014-3587Aug 23, 2014
    PHP
    PHP
    risk 0.00cvss —epss 0.20

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this…

  • CVE-2014-3487Jul 9, 2014
    PHP
    PHP
    risk 0.00cvss —epss 0.15

    The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF…

  • CVE-2014-3479Jul 9, 2014
    PHP
    PHP
    risk 0.00cvss —epss 0.15

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted…

  • CVE-2014-3538Jul 3, 2014
    File Project
    File
    risk 0.00cvss —epss 0.12

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability…

  • CVE-2013-7345Mar 24, 2014
    File Project
    File
    risk 0.00cvss —epss 0.03

    The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers…

  • CVE-2014-2270Mar 14, 2014
    File Project
    File
    risk 0.00cvss —epss 0.04

    softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.

  • CVE-2009-3930Nov 10, 2009
    File Project
    File
    risk 0.00cvss —epss 0.02

    Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.

  • CVE-2009-2830Nov 10, 2009
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file. NOTE: this might…

  • CVE-2009-1515May 4, 2009
    File Project
    File
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are…

  • CVE-2007-2799May 23, 2007
    File Project
    File
    risk 0.00cvss —epss 0.03

    Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this…

  • CVE-2007-2026Apr 13, 2007
    Amavis
    Amavis
    risk 0.00cvss —epss 0.02

    The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as…

Page 2 of 2