CVE-2015-4604

Description

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

References

http://www.securitytracker.com/id/1032709

http://www.securityfocus.com/bid/75241

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.openwall.com/lists/oss-security/2015/06/16/12

http://rhn.redhat.com/errata/RHSA-2015-1187.html

http://rhn.redhat.com/errata/RHSA-2015-1186.html

http://rhn.redhat.com/errata/RHSA-2015-1135.html

http://php.net/ChangeLog-5.php

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f938112c495b0d26572435c0be73ac0bfe642ecd

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3