file

• Author: kikadf
• Vulnerable: 5.14-2arcturus2
• Unaffected: 5.14-2arcturus3

Mike Frysinger discovered that the file awk script detector used multiple wildcard with unlimited repetitions. Francisco Alonso discovered that file incorrectly handled certain CDF documents. Jan Kaluža discovered that file did not properly restrict the amount of data read during regex searches.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7345
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3538