file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php | * | 5.5.35 (including) |