CVE-2004-1019
published 2005-01-10CVE-2004-1019: The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via…
PriorityP336critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
8.00%
94.4th percentile
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Affected
82 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openpkg | openpkg | — | — |
| openpkg | openpkg | — | — |
| openpkg | openpkg | — | — |
| php | php | <= 5.4.35 | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
php: use after free vulnerability in unserialize()
vendor_redhat·2014-12-18·CVSS 10.0
CVE-2014-8142 [CRITICAL] CWE-416 php: use after free vulnerability in unserialize()
php: use after free vulnerability in unserialize()
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.
A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.
Statement: This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 5 and 6 or the versions of php53 as shipped
Ubuntu
PHP vulnerabilities
vendor_ubuntu·2004-12-17
CVE-2004-1019 PHP vulnerabilities
Title: PHP vulnerabilities
Summary: PHP vulnerabilities
Stefan Esser reported several buffer overflows in PHP's variable unserializing
handling. These could allow an attacker to execute arbitrary code on the server
with the PHP interpreter's privileges by sending specially crafted input
strings (form data, cookie values, and similar).
Additionally, Ilia Alshanetsky discovered a buffer overflow in the
exif_read_data() function. Attackers could execute arbitrary code on the server
by sending a JPEG image with a very long "sectionname" value to PHP
applications that support image uploads.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
security flaw
vendor_redhat·2004-12-15·CVSS 10.0
CVE-2004-1019 [CRITICAL] security flaw
security flaw
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
GHSA
GHSA-mq7m-72cj-7m7m: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2014-8142 [CRITICAL] GHSA-mq7m-72cj-7m7m: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.
GHSA
GHSA-8xg9-g9f5-rcr7: The deserialization code in PHP before 4
ghsa_unreviewed·2022-04-29
CVE-2004-1019 [HIGH] CWE-20 GHSA-8xg9-g9f5-rcr7: The deserialization code in PHP before 4
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
OSV
CVE-2014-8142: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer
osv·2014-12-20·CVSS 10.0
CVE-2014-8142 [CRITICAL] CVE-2014-8142: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2004-1019 security flaw
bugzilla·2018-08-16·CVSS 10.0
CVE-2004-1019 [CRITICAL] CVE-2004-1019 security flaw
CVE-2004-1019 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Bugzilla
CVE-2004-0595 PHP flaws (CVE-2004-0594 CVE-2004-1018 CVE-2004-1019)
bugzilla·2005-10-25·CVSS 5.1
CVE-2004-0595 [MEDIUM] CVE-2004-0595 PHP flaws (CVE-2004-0594 CVE-2004-1018 CVE-2004-1019)
CVE-2004-0595 PHP flaws (CVE-2004-0594 CVE-2004-1018 CVE-2004-1019)
Multiple flaws in Stronghold 4.0 PHP
A flaw in the strip_tags function in PHP, commonly used by PHP scripts to
prevent cross-site scripting attacks by removing HTML tags from
user-supplied form data. HTML tags can, in some cases, be passed intact
through the strip_tags function, which may allow a cross-site scripting
attack. (CVE-2004-0595)
A flaw if the memory_limit configuration setting is enabled in PHP. If a
remote attacker could force the PHP interpreter to allocate more memory
than the memory_limit setting before script execution begins, then the
attacker may be able to supply the contents of a PHP hash table remotely.
This hash table could then be used to execute arbitrary code in the context
of the server. (CVE-
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.htmlhttp://lists.opensuse.org/opensuse-updates/2015-02/msg00079.htmlhttp://marc.info/?l=bugtraq&m=110314318531298&w=2http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.htmlhttp://www.hardened-php.net/advisories/012004.txthttp://www.mandriva.com/security/advisories?name=MDKSA-2004:151http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlhttp://www.php.net/release_4_3_10.phphttp://www.redhat.com/support/errata/RHSA-2004-687.htmlhttp://www.redhat.com/support/errata/RHSA-2005-032.htmlhttp://www.redhat.com/support/errata/RHSA-2005-816.htmlhttp://www.securityfocus.com/advisories/9028https://bugzilla.fedora.us/show_bug.cgi?id=2344https://exchange.xforce.ibmcloud.com/vulnerabilities/18514https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10511http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.htmlhttp://lists.opensuse.org/opensuse-updates/2015-02/msg00079.htmlhttp://marc.info/?l=bugtraq&m=110314318531298&w=2http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.htmlhttp://www.hardened-php.net/advisories/012004.txthttp://www.mandriva.com/security/advisories?name=MDKSA-2004:151http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlhttp://www.php.net/release_4_3_10.phphttp://www.redhat.com/support/errata/RHSA-2004-687.htmlhttp://www.redhat.com/support/errata/RHSA-2005-032.htmlhttp://www.redhat.com/support/errata/RHSA-2005-816.htmlhttp://www.securityfocus.com/advisories/9028https://bugzilla.fedora.us/show_bug.cgi?id=2344https://exchange.xforce.ibmcloud.com/vulnerabilities/18514https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10511
2005-01-10
Published