NVD

Id
71420  
Name
CVE-2004-1019  
Description
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1019  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369275 71420 CVE-2004-1019 SUSE-SU-2015:0365  View
369276 71420 CVE-2004-1019 openSUSE-SU-2015:0325  View
369277 71420 CVE-2004-1019 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5  View
369278 71420 CVE-2004-1019 OpenPKG-SA-2004.053  View
369279 71420 CVE-2004-1019 oval:org.mitre.oval:def:10511  View
369280 71420 CVE-2004-1019 http://www.hardened-php.net/advisories/012004.txt  View
369281 71420 CVE-2004-1019 MDKSA-2004:151  View
369282 71420 CVE-2004-1019 SUSE-SA:2005:002  View
369283 71420 CVE-2004-1019 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
369284 71420 CVE-2004-1019 http://www.php.net/release_4_3_10.php  View
369285 71420 CVE-2004-1019 RHSA-2004:687  View
369286 71420 CVE-2004-1019 RHSA-2005:032  View
369287 71420 CVE-2004-1019 RHSA-2005:816  View
369288 71420 CVE-2004-1019 HPSBMA01212  View
369289 71420 CVE-2004-1019 php-unserialize-code-execution(18514)  View
369290 71420 CVE-2004-1019 FLSA:2344  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63197 JVNDB-2004-000539 PHP の unserialize() 関数におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2004-1019 9446 CVE-2004-1019 71420 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000539.html 2004-12-15 2015-04-08 View