Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2014-3710 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2014-3710

Medium
Reference: CVE-2014-3710
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3710
Title: PHP Improper Input Validation Vulnerability
Overview:

The donote function in readelf.c in file through 5.20 as used in the Fileinfo component in PHP 5.4.34 does not ensure that sufficient note headers are present which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.