Red Hat Bugzilla – Bug 977463
CVE-2013-4636 php (Fileinfo): Invalid pointer dereference when checking mimetype of certain MP3 files
Last modified: 2013-06-26 01:36:51 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-4636 to the following vulnerability:
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.
Relevant upstream patch:
This issue was caused by the following upstream commit, which was applied between php-5.4.14 and php-5.4.15 releases:
This commit upgrades the embedded version of libmagic to 5.14.
The versions of php and php53 as shipped with Red Hat Enterprise Linux 5 and 6, do not contain this commit and therefore are not affected by this flaw.
This issue was addressed in Fedora-18 via the following update:
Not Vulnerable. This issue does not affect the version of php as shipped with Red Hat Enterprise Linux 5 and 6. This issue does not affect the version of php53 as shipped with Red Hat Enterprise Linux 5.