| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.4.0, < 5.4.29≥ 5.5.0, < 5.5.13< 5.3.29 | 5.4.295.5.135.3.29 |
The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free