VULNERABILITY INTELLIGENCE
CVE-2014-3478
CVSS score6.5 MEDIUM
EPSS probability15.18%
CISA KEVNot currently listed
Published2014-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer