CVE ID:	CVE-2012-1571
Description:	file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
Test IDs:	1.3.6.1.4.1.25623.1.0.123296   1.3.6.1.4.1.25623.1.0.72431   1.3.6.1.4.1.25623.1.0.871253   1.3.6.1.4.1.25623.1.1.10.2014.0367   1.3.6.1.4.1.25623.1.0.72021   1.3.6.1.4.1.25623.1.1.2.2019.1424   1.3.6.1.4.1.25623.1.0.71347   1.3.6.1.4.1.25623.1.0.882044   1.3.6.1.4.1.25623.1.0.71150   1.3.6.1.4.1.25623.1.0.882037   1.3.6.1.4.1.25623.1.0.123289   1.3.6.1.4.1.25623.1.0.882041   1.3.6.1.4.1.25623.1.0.871254   1.3.6.1.4.1.25623.1.0.123339   1.3.6.1.4.1.25623.1.0.831589
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1571 Debian Security Information: DSA-2422 (Google Search) http://www.debian.org/security/2012/dsa-2422 http://www.mandriva.com/security/advisories?name=MDVSA-2012:035 http://mx.gw.com/pipermail/file/2012/000914.html http://www.ubuntu.com/usn/USN-2123-1