CVE-2014-0237 in Mac OS X

Summary

The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

12/03/2013

Disclosure

06/01/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
67623	Apple Mac OS X apache_mod_php cdf.c cdf_unpack_summary_info resource management	399	Not defined	Official fix	CVE-2014-0237
13405	PHP cdf.c cdf_unpack_summary_info resource management	399	Unproven	Official fix	CVE-2014-0237

Sources

• MITRE
• NVD
• CVE Details