Summary
It was discovered that file incorrectly handled certain CDF documents. A
attacker could use this issue to cause file to hang or crash, resulting
in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | file | 1:5.14-2ubuntu3.2 |
Vulnerabilities 1
-
Unscored —CVE-2014-3587 EPSS 20%
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo componen…
References
-
report
https://ubuntu.com/security/CVE-2014-3587