VDB
CVE-2004-1065
CVE-2004-1065
PUBLISHED
CVSS 10 CRITICAL
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
EPSS 10.04% · 95.2th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
10.04%
95.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| php | php | 5.0.1, 4.3.9, 4.0.7 |
| trustix | secure_linux | 2.0, 2.1, 2.2 |
| openpkg | openpkg | 2.1, 2.2, current |
| n/a | n/a | n/a |
| ubuntu | ubuntu_linux | 4.1, 4.1 |
Timeline
- Dec 22, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Nov 29, 2023 EPSS Score
References
- http://www.php.net/release_4_3_10.php url
- oval:org.mitre.oval:def:10877 vdb
- FLSA:2344 vendor-advisory
- HPSBMA01212 vendor-advisory
- MDKSA-2004:151 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-1065 advisory
- http://www.redhat.com/support/errata/RHSA-2005-032.html url
- http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18517 technical
- http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html technical
- http://www.redhat.com/support/errata/RHSA-2004-687.html patch