file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade file | Sep 20, 2017 | Jul 17, 2012 |
| Centos_linux | — | Upgrade php-gdUpgrade php-pspellUpgrade php-pdoUpgrade php53-snmpUpgrade php53-mbstringUpgrade php53-soapUpgrade php53-gdUpgrade php-processUpgrade php53-dbaUpgrade php53-xmlUpgrade php53-odbcUpgrade php-develUpgrade php-soapUpgrade php-ldapUpgrade php-dbaUpgrade php53-imapUpgrade php-ztsUpgrade php-imapUpgrade php-enchantUpgrade php-fpmUpgrade php53Upgrade php53-pdoUpgrade php-bcmathUpgrade phpUpgrade php-embeddedUpgrade php53-pspellUpgrade php-recodeUpgrade php53-cliUpgrade php-intlUpgrade php53-ldapUpgrade php-cliUpgrade php-commonUpgrade php53-mysqlUpgrade php53-bcmathUpgrade php-tidyUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php53-xmlrpcUpgrade php-pgsqlUpgrade php-mysqlUpgrade php53-pgsqlUpgrade php-xmlUpgrade php53-develUpgrade php53-commonUpgrade php53-intlUpgrade php-odbcUpgrade php53-processUpgrade php-snmp | Dec 1, 2016 | Jul 17, 2012 |
| Debian | — | Upgrade file | Jul 30, 2024 | Jul 17, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 2, 2015 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | Aug 11, 2016 |
| Gentoo Linux | — | Upgrade sys-apps/file. | Oct 30, 2017 | Jul 17, 2012 |
| Oracle_linux | — | Upgrade fileUpgrade python-magicUpgrade file-develUpgrade file-libsUpgrade file-static | May 12, 2016 | Jul 17, 2012 |
| Suse | — | Upgrade file-develUpgrade file-magicUpgrade fileUpgrade libmagic1Upgrade libmagic1-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagic1Upgrade file | Nov 8, 2024 | Jul 17, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub