CVE-2004-1019 in PHP
Summary
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
11/04/2004
Disclosure
01/10/2005
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 1062 | PHP addslashes input validation | 20 | Proof-of-Concept | Official fix | CVE-2004-1019 |