DEBIAN-CVE-2014-3478

Advisory lineage Upstream: 1 Downstream: 3
Upstream
CVE-2014-3478
Published: 09 Jul 2014, 11:07
Last modified:28 Apr 2026, 20:13

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.5 MEDIUM
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Jul 2014, 11:07
Published
Vulnerability first disclosed
28 Apr 2026, 20:13
Last Modified
Vulnerability information updated

Description

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Systems

  • debian•file

    < 1:5.19-1 | < 1:5.19-1 | < 1:5.19-1 | < 1:5.19-1

References (1)