Vulnetix
Try Vulnetix Request Demo
CVE-2013-4636 PUBLISHED CVSS 4.300000190734863 MEDIUM

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

EPSS 0.33% · 55.3th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.33%
55.3th percentile

Affected Products

VendorProductVersions
phpphp5.4.15, 5.4.0, 5.4.1
n/an/an/a

Timeline

References

Open in Interactive Console →