Approved changes feed: RSS · Atom
cpe:2.3:a:file_project:file:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | File Project (cf167c92-3f92-548c-9d5f-f1d10eedfb70) |
|---|---|
| Product | File (77cae0a6-d0a6-5238-82d5-b4ae6e424546) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/file/file |
purl2cpe | 2026-06-01 10:14:47.038526 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-18218 |
vulnerable | 2026-06-08 05:13:11.047373 |
Details available
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
Published: 2019-10-21T04:41:56.000Z
Updated: 2024-08-05T01:47:13.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9653 |
vulnerable | 2026-06-08 05:06:12.360195 |
Details available
readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.
Published: 2015-03-30T10:00:00.000Z
Updated: 2024-08-06T13:47:41.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9652 |
vulnerable | 2026-06-08 05:06:12.359478 |
Details available
The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.
Published: 2015-03-30T10:00:00.000Z
Updated: 2024-08-06T13:47:41.726Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8117 |
vulnerable | 2026-06-08 05:06:07.691928 |
Details available
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
Published: 2014-12-17T19:00:00.000Z
Updated: 2024-08-06T13:10:50.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3487 |
vulnerable | 2026-06-08 05:05:32.974396 |
Details available
The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.
Published: 2014-07-09T10:00:00.000Z
Updated: 2024-08-06T10:43:06.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3480 |
vulnerable | 2026-06-08 05:05:32.880479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3479 |
vulnerable | 2026-06-08 05:05:32.879588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2270 |
vulnerable | 2026-06-08 05:05:28.193191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.