CVE-2014-5120
NoneCVSS
—
EPSS
16.9%
Published
Aug 23, 2014
CISA due date
—
The record
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:3 | php | 0 | 5.4.32-1.mga3 |
| Mageia:3 | php-apc | 0 | 3.1.14-7.12.mga3 |
| Mageia:3 | php-gd-bundled | 0 | 5.4.32-1.mga3 |
| Mageia:4 | php | 0 | 5.5.16-1.mga4 |
| Mageia:4 | php-apc | 0 | 3.1.15-4.7.mga4 |
| Red Hat:enterprise_linux:7::client | php | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-bcmath | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-cli | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-common | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-dba | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-debuginfo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-devel | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-embedded | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-enchant | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-fpm | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-gd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-intl | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-ldap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-mbstring | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-mysql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-mysqlnd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-odbc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-pdo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-pgsql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-process | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-pspell | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-recode | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-snmp | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-soap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-xml | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::client | php-xmlrpc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-bcmath | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-cli | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-common | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-dba | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-debuginfo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-devel | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-embedded | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-enchant | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-fpm | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-gd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-intl | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-ldap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-mbstring | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-mysql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-mysqlnd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-odbc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-pdo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-pgsql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-process | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-pspell | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-recode | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-snmp | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-soap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-xml | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::computenode | php-xmlrpc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-bcmath | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-cli | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-common | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-dba | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-debuginfo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-devel | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-embedded | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-enchant | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-fpm | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-gd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-intl | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-ldap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-mbstring | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-mysql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-mysqlnd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-odbc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-pdo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-pgsql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-process | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-pspell | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-recode | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-snmp | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-soap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-xml | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::server | php-xmlrpc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-bcmath | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-cli | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-common | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-dba | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-debuginfo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-devel | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-embedded | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-enchant | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-fpm | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-gd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-intl | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-ldap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-mbstring | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-mysql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-mysqlnd | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-odbc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-pdo | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-pgsql | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-process | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-pspell | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-recode | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-snmp | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-soap | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-xml | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:enterprise_linux:7::workstation | php-xmlrpc | 0 | 0:5.4.16-23.el7_0.1 |
| Red Hat:rhel_software_collections:1::el6 | php54-php | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-bcmath | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-cli | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-common | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-dba | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-debuginfo | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-devel | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-enchant | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-fpm | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-gd | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-imap | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-intl | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-ldap | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-mbstring | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-mysqlnd | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-odbc | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-pdo | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-pgsql | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-process | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-pspell | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-recode | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-snmp | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-soap | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-tidy | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-xml | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php54-php-xmlrpc | 0 | 0:5.4.16-22.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-bcmath | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-cli | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-common | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-dba | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-debuginfo | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-devel | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-enchant | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-fpm | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-gd | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-gmp | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-imap | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-intl | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-ldap | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-mbstring | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-mysqlnd | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-odbc | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-opcache | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-pdo | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-pgsql | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-process | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-pspell | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-recode | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-snmp | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-soap | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-tidy | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-xml | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el6 | php55-php-xmlrpc | 0 | 0:5.5.6-13.el6 |
| Red Hat:rhel_software_collections:1::el7 | php54-php | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-bcmath | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-cli | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-common | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-dba | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-debuginfo | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-devel | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-enchant | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-fpm | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-gd | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-intl | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-ldap | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-mbstring | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-mysqlnd | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-odbc | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-pdo | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-pgsql | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-process | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-pspell | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-recode | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-snmp | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-soap | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-xml | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php54-php-xmlrpc | 0 | 0:5.4.16-22.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-bcmath | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-cli | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-common | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-dba | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-debuginfo | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-devel | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-enchant | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-fpm | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-gd | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-gmp | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-intl | 0 | 0:5.5.6-13.el7 |
| Red Hat:rhel_software_collections:1::el7 | php55-php-ldap | 0 | 0:5.5.6-13.el7 |
Related vulnerabilities
- CVE-2014-3710 The donote function in readelf.c in file through 5.20, as used in the Fileinfo component… Also affects php
- CVE-2014-3597 Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before… Also affects php
- CVE-2014-3587 Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as… Also affects php
- CVE-2014-3480 The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo… Also affects php
- CVE-2014-3515 The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates… Also affects php
- CVE-2014-3478 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in… Also affects php
- CVE-2014-3487 The cdf_read_property_info function in file before 5.19, as used in the Fileinfo… Also affects php
- CVE-2014-3479 The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the… Also affects php