CVE-2004-1019 in PHP
Сводка (Английский)
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
04.11.2004
Раскрытие
10.01.2005
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 1062 | PHP addslashes эскалация привилегий | 20 | Доказательство концепции | Официальное исправление | CVE-2004-1019 |