CVE-2014-1943: Medium severity Fine Free File Project Fine Free File vulnerability
Published Feb 18, 2014
·Updated
Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
Affected Software
9 affected components
Fine Free File Project Fine Free File<5.17
PHP PHP>=5.4.0<5.4.26
PHP PHP>=5.5.0<5.5.10
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Canonical Ubuntu Linux=13.10
Debian Debian Linux=6.0
Debian Debian Linux=7.0
Event History
Feb 18, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1943?
CVE-2014-1943 is classified as a denial of service vulnerability due to its potential to cause infinite recursion and CPU consumption.
2
How do I fix CVE-2014-1943?
To fix CVE-2014-1943, you should update Fine Free file to version 5.17 or later, and ensure that your PHP version is not vulnerable.
3
What versions of Fine Free file are affected by CVE-2014-1943?
Fine Free file versions prior to 5.17 are affected by CVE-2014-1943.
4
Which operating systems are impacted by CVE-2014-1943?
CVE-2014-1943 impacts various operating systems including specific versions of Ubuntu and Debian.
5
Can CVE-2014-1943 be exploited remotely?
Yes, CVE-2014-1943 can be exploited by context-dependent attackers who can supply crafted indirect offset values.