CVE-2014-3480

Source
https://nvd.nist.gov/vuln/detail/CVE-2014-3480
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-3480.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-3480
Downstream
Related
Published
2014-07-09T11:07:01Z
Modified
2025-08-09T20:01:28Z
Summary
[none]
Details

The cdfcountchain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate sector-count data, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.

References

Affected packages