php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Sec Bug #67411 fileinfo: cdf_check_stream_offset insufficient boundary check
Submitted: 2014-06-10 11:40 UTC Modified: 2014-06-27 08:05 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: Filesystem function related
PHP Version: 5.4.29 OS: irrevelant
Private report: No CVE-ID: 2014-3479
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: remi@php.net
New email:
PHP Version: OS:

 

 [2014-06-10 11:40 UTC] remi@php.net 
Description:
------------
A flaw was found in the way file uses cdf_check_stream_offset function when checks stream offsets for certain Composite Document Format (CDF).

Upstream commit:
https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67


Acknowledgment:

This issue was discovered by Francisco Alonso of the Red Hat Security Response Team.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-06-10 11:41 UTC] remi@php.net
-CVE-ID: +CVE-ID: 2014-3479
 [2014-06-10 11:41 UTC] remi@php.net 
Waiting for CVE-2014-3479 public disclosure date
 [2014-06-10 12:17 UTC] remi@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: remi
 [2014-06-10 12:17 UTC] remi@php.net 
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

http://git.php.net/?p=php-src.git;a=commit;h=5c9f96799961818944d43b22c241cc56c215c2e4
 [2014-07-02 08:26 UTC] ab@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=5c9f96799961818944d43b22c241cc56c215c2e4
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-07-02 08:34 UTC] ab@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=5c9f96799961818944d43b22c241cc56c215c2e4
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-07-29 21:56 UTC] johannes@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=8d1d03850955855b86f949b43e532ef8c22c1cc3
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-08-14 15:34 UTC] johannes@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=8d1d03850955855b86f949b43e532ef8c22c1cc3
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-08-14 19:32 UTC] dmitry@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=8d1d03850955855b86f949b43e532ef8c22c1cc3
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-10-07 23:14 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=8d1d03850955855b86f949b43e532ef8c22c1cc3
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-10-07 23:14 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=5c9f96799961818944d43b22c241cc56c215c2e4
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-10-07 23:25 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=8d1d03850955855b86f949b43e532ef8c22c1cc3
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 [2014-10-07 23:25 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=5c9f96799961818944d43b22c241cc56c215c2e4
Log: Fixed Bug #67411 	fileinfo: cdf_check_stream_offset insufficient boundary check
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 14:01:29 2024 UTC