php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Sec Bug #67413 fileinfo: cdf_read_property_info insufficient boundary check
Submitted: 2014-06-10 11:45 UTC Modified: 2014-06-27 08:05 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: Filesystem function related
PHP Version: 5.4.29 OS: irrevelant
Private report: No CVE-ID: 2014-3487
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: remi@php.net
New email:
PHP Version: OS:

 

 [2014-06-10 11:45 UTC] remi@php.net 
Description:
------------
A flaw was found in the way file uses cdf_read_property_info function when checks stream offsets for certain Composite Document Format (CDF).

Upstream commit:
https://github.com/file/file/commit/93e063ee374b6a75729df9e7201fb511e47e259d

Acknowledgment:

This issue was discovered by Francisco Alonso of the Red Hat Security Response Team.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-06-10 11:45 UTC] remi@php.net
-CVE-ID: +CVE-ID: 2014-3487
 [2014-06-10 11:45 UTC] remi@php.net 
Waiting for CVE-2014-3487 public disclosure date.
 [2014-06-10 12:37 UTC] remi@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: remi
 [2014-06-10 12:37 UTC] remi@php.net 
The fix for this bug has been committed.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.

 For Windows:

http://windows.php.net/snapshots/
 
Thank you for the report, and for helping us make PHP better.

http://git.php.net/?p=php-src.git;a=commit;h=25b1dc917a53787dbb2532721ca22f3f36eb13c0
 [2014-07-02 08:26 UTC] ab@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=25b1dc917a53787dbb2532721ca22f3f36eb13c0
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-07-02 08:34 UTC] ab@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=25b1dc917a53787dbb2532721ca22f3f36eb13c0
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-07-29 21:56 UTC] johannes@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=2fe5bcbeb58bb1088f9fcdb9f02599880454b602
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-08-14 15:34 UTC] johannes@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=2fe5bcbeb58bb1088f9fcdb9f02599880454b602
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-08-14 19:32 UTC] dmitry@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=2fe5bcbeb58bb1088f9fcdb9f02599880454b602
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-10-07 23:14 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=2fe5bcbeb58bb1088f9fcdb9f02599880454b602
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-10-07 23:14 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=25b1dc917a53787dbb2532721ca22f3f36eb13c0
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-10-07 23:25 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=2fe5bcbeb58bb1088f9fcdb9f02599880454b602
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 [2014-10-07 23:25 UTC] stas@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src-security.git;a=commit;h=25b1dc917a53787dbb2532721ca22f3f36eb13c0
Log: Fixed Bug #67413 	fileinfo: cdf_read_property_info insufficient boundary chec
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 15:01:30 2024 UTC