CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0594

The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.869

EPSS Ranking 99.4%

CVSS Severity

CVSS v2 Score 5.1

References

Products affected by CVE-2004-0594

Openpkg » Openpkg » Version: 2.0

cpe:2.3:a:openpkg:openpkg:2.0
Openpkg » Openpkg » Version: 2.1

cpe:2.3:a:openpkg:openpkg:2.1
Php » Php » Version: 4.0

cpe:2.3:a:php:php:4.0
Php » Php » Version: 4.0.0

cpe:2.3:a:php:php:4.0.0
Php » Php » Version: 4.0.1

cpe:2.3:a:php:php:4.0.1
Php » Php » Version: 4.0.2

cpe:2.3:a:php:php:4.0.2
Php » Php » Version: 4.0.3

cpe:2.3:a:php:php:4.0.3
Php » Php » Version: 4.0.4

cpe:2.3:a:php:php:4.0.4
Php » Php » Version: 4.0.5

cpe:2.3:a:php:php:4.0.5
Php » Php » Version: 4.0.6

cpe:2.3:a:php:php:4.0.6
Php » Php » Version: 4.0.7

cpe:2.3:a:php:php:4.0.7
Php » Php » Version: 4.1.0

cpe:2.3:a:php:php:4.1.0
Php » Php » Version: 4.1.1

cpe:2.3:a:php:php:4.1.1
Php » Php » Version: 4.1.2

cpe:2.3:a:php:php:4.1.2
Php » Php » Version: 4.1.3

cpe:2.3:a:php:php:4.1.3
Php » Php » Version: 4.2

cpe:2.3:a:php:php:4.2
Php » Php » Version: 4.2.0

cpe:2.3:a:php:php:4.2.0
Php » Php » Version: 4.2.1

cpe:2.3:a:php:php:4.2.1
Php » Php » Version: 4.2.2

cpe:2.3:a:php:php:4.2.2
Php » Php » Version: 4.2.3

cpe:2.3:a:php:php:4.2.3
Php » Php » Version: 4.2.4

cpe:2.3:a:php:php:4.2.4
Php » Php » Version: 4.3

cpe:2.3:a:php:php:4.3
Php » Php » Version: 4.3.0

cpe:2.3:a:php:php:4.3.0
Php » Php » Version: 4.3.1

cpe:2.3:a:php:php:4.3.1
Php » Php » Version: 4.3.2

cpe:2.3:a:php:php:4.3.2
Php » Php » Version: 4.3.3

cpe:2.3:a:php:php:4.3.3
Php » Php » Version: 4.3.4

cpe:2.3:a:php:php:4.3.4
Php » Php » Version: 4.3.5

cpe:2.3:a:php:php:4.3.5
Php » Php » Version: 4.3.6

cpe:2.3:a:php:php:4.3.6
Php » Php » Version: 5.0.0

cpe:2.3:a:php:php:5.0.0
Avaya » Converged Communications Server » Version: 2.0

cpe:2.3:h:avaya:converged_communications_server:2.0
Debian » Debian Linux » Version: 3.0

cpe:2.3:o:debian:debian_linux:3.0
Hp » Hp-Ux » Version: b.11.00

cpe:2.3:o:hp:hp-ux:b.11.00
Hp » Hp-Ux » Version: b.11.11

cpe:2.3:o:hp:hp-ux:b.11.11
Hp » Hp-Ux » Version: b.11.22

cpe:2.3:o:hp:hp-ux:b.11.22
Hp » Hp-Ux » Version: b.11.23

cpe:2.3:o:hp:hp-ux:b.11.23
Trustix » Secure Linux » Version: 1.5

cpe:2.3:o:trustix:secure_linux:1.5
Trustix » Secure Linux » Version: 2.0

cpe:2.3:o:trustix:secure_linux:2.0
Trustix » Secure Linux » Version: 2.1

cpe:2.3:o:trustix:secure_linux:2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0594

Products

Pricing

Contact Us