CVE

Id
9447  
CVE No.
CVE-2004-1019  
Status
Candidate  
Description
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.  
Phase
Assigned (20041104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63422 9447 CVE-2004-1019 BUGTRAQ:20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5  View
63423 9447 CVE-2004-1019 URL:http://marc.info/?l=bugtraq&m=110314318531298&w=2  View
63424 9447 CVE-2004-1019 MISC:http://www.hardened-php.net/advisories/012004.txt  View
63425 9447 CVE-2004-1019 CONFIRM:http://www.php.net/release_4_3_10.php  View
63426 9447 CVE-2004-1019 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
63427 9447 CVE-2004-1019 FEDORA:FLSA:2344  View
63428 9447 CVE-2004-1019 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2344  View
63429 9447 CVE-2004-1019 HP:HPSBMA01212  View
63430 9447 CVE-2004-1019 URL:http://www.securityfocus.com/advisories/9028  View
63431 9447 CVE-2004-1019 MANDRAKE:MDKSA-2004:151  View
63432 9447 CVE-2004-1019 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:151  View
63433 9447 CVE-2004-1019 OPENPKG:OpenPKG-SA-2004.053  View
63434 9447 CVE-2004-1019 URL:http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html  View
63435 9447 CVE-2004-1019 REDHAT:RHSA-2004:687  View
63436 9447 CVE-2004-1019 URL:http://www.redhat.com/support/errata/RHSA-2004-687.html  View
63437 9447 CVE-2004-1019 REDHAT:RHSA-2005:032  View
63438 9447 CVE-2004-1019 URL:http://www.redhat.com/support/errata/RHSA-2005-032.html  View
63439 9447 CVE-2004-1019 REDHAT:RHSA-2005:816  View
63440 9447 CVE-2004-1019 URL:http://www.redhat.com/support/errata/RHSA-2005-816.html  View
63441 9447 CVE-2004-1019 SUSE:SUSE-SA:2005:002  View
63442 9447 CVE-2004-1019 URL:http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html  View
63443 9447 CVE-2004-1019 SUSE:SUSE-SU-2015:0365  View
63444 9447 CVE-2004-1019 URL:http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html  View
63445 9447 CVE-2004-1019 SUSE:openSUSE-SU-2015:0325  View
63446 9447 CVE-2004-1019 URL:http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html  View
63447 9447 CVE-2004-1019 OVAL:oval:org.mitre.oval:def:10511  View
63448 9447 CVE-2004-1019 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10511  View
63449 9447 CVE-2004-1019 XF:php-unserialize-code-execution(18514)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63198 JVNDB-2004-000540 PHP の addslashes() 関数における不適切な終端文字のエスケープ処理の脆弱性 ------------ CVE-2004-1020 9447 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000540.html  View