UpHeron
All vulnerabilities

Servers and applications

CVE-2013-4636

The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via an MP3 file that triggers incorrect MIME type detection during access to an finfo object.

Severity
Medium 4.3
Published
21 Jun 2013
Last changed
16 Jun 2026
Added to UpHeron
14 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • Version 5.4.15
  • Version 5.4.14
  • Version 5.4.13
  • Version 5.4.12
All 16 release lines
  • Version 5.4.0
  • Version 5.4.1
  • Version 5.4.2
  • Version 5.4.3
  • Version 5.4.4
  • Version 5.4.5
  • Version 5.4.6
  • Version 5.4.7
  • Version 5.4.8
  • Version 5.4.9
  • Version 5.4.10
  • Version 5.4.11
  • Version 5.4.12
  • Version 5.4.13
  • Version 5.4.14
  • Version 5.4.15

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-4636
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-4636