| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≤ 5.5.35 |
file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free