CVE-2004-1065

2005-01-1005:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-1065

buffer overflow

php

exif_read_data

remote code execution

security vulnerability

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.5%

JSON

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

CPENameOperatorVersion
php:phpphpeq4.3.9
php:phpphpeq3.0
php:phpphpeq3.0.5
php:phpphpeq3.0.11
php:phpphpeq4.2.0
php:phpphpeq3.0.1
php:phpphpeq3.0.2
php:phpphpeq4.1.0
openpkg:openpkgopenpkgeq2.1
php:phpphpeq4.3.4

CPE	Name	Operator	Version
php:php	php	eq	4.3.9
php:php	php	eq	3.0
php:php	php	eq	3.0.5
php:php	php	eq	3.0.11
php:php	php	eq	4.2.0
php:php	php	eq	3.0.1
php:php	php	eq	3.0.2
php:php	php	eq	4.1.0
openpkg:openpkg	openpkg	eq	2.1
php:php	php	eq	4.3.4