CVE-2004-1019

PHP <4.3.10 & PHP 5.x <5.0.2 - Denial of Service

Title source: manual
STIX 2.1

Description

The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.

References (16)

Core 16
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-032.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18514
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html
Vendor Advisory x_refsource_confirm
http://www.php.net/release_4_3_10.php
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10511
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-816.html
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
Various Sources x_refsource_misc
http://www.hardened-php.net/advisories/012004.txt
Issue Tracking vendor-advisory x_refsource_fedora
https://bugzilla.fedora.us/show_bug.cgi?id=2344
Various Sources vendor-advisory x_refsource_openpkg
http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/advisories/9028
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-687.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110314318531298&w=2

Scores

EPSS 0.0598
EPSS Percentile 90.8%

Details

CWE
CWE-20
Status published
Products (44)
openpkg/openpkg 2.1
openpkg/openpkg 2.2
openpkg/openpkg current
php/php 3.0
php/php 3.0.1
php/php 3.0.2
php/php 3.0.3
php/php 3.0.4
php/php 3.0.5
php/php 3.0.6
... and 34 more
Published Jan 10, 2005
Tracked Since Feb 18, 2026