CVE-2013-4636

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid…

published June 21, 2013

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01975 · 80.3th percentile
Published
2013-06-21T21:00Z
EPSS history
Timeline
  • 21 JUN 21:00Z
    The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid…
    cvelistv5