CVE-2004-1065

🗓️ 22 Dec 2004 05:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 68 Views

Buffer overflow in PHP exif_read_data function pre-4.3.10 & 5.x up to 5.0.2 allows remote code execution

Reporter	Title	Published	Views	Family All 43
Tenable Nessus	PHP < 4.3.10 / 5.0.3 Multiple Vulnerabilities	10 Dec 200400:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	26 Jan 200500:00	–	nessus
Tenable Nessus	Fedora Core 2 : php-4.3.10-2.4 (2004-567)	23 Dec 200400:00	–	nessus
Tenable Nessus	Fedora Core 3 : php-4.3.10-3.2 (2004-568)	23 Dec 200400:00	–	nessus
Tenable Nessus	FreeBSD : php -- multiple vulnerabilities (d47e9d19-5016-11d9-9b5f-0050569f0001)	13 Jul 200500:00	–	nessus
Tenable Nessus	GLSA-200412-14 : PHP: Multiple vulnerabilities	19 Dec 200400:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	26 Jan 200500:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : php (MDKSA-2004:151)	19 Dec 200400:00	–	nessus
Tenable Nessus	PHP < 4.3.10 / 5.0.3 Multiple Vulnerabilities	15 Dec 200400:00	–	nessus
Tenable Nessus	RHEL 3 : php (RHSA-2004:687)	23 Dec 200400:00	–	nessus

NVD

Node

openpkg openpkgMatch2.1

OR

openpkg openpkgMatch2.2

OR

openpkg openpkgMatchcurrent

OR

php phpMatch3.0

OR

php phpMatch3.0.1

OR

php phpMatch3.0.2

OR

php phpMatch3.0.3

OR

php phpMatch3.0.4

OR

php phpMatch3.0.5

OR

php phpMatch3.0.6

OR

php phpMatch3.0.7

OR

php phpMatch3.0.8

OR

php phpMatch3.0.9

OR

php phpMatch3.0.10

OR

php phpMatch3.0.11

OR

php phpMatch3.0.12

OR

php phpMatch3.0.13

OR

php phpMatch3.0.14

OR

php phpMatch3.0.15

OR

php phpMatch3.0.16

OR

php phpMatch3.0.17

OR

php phpMatch3.0.18

OR

php phpMatch4.0

OR

php phpMatch4.0.1

OR

php phpMatch4.0.1patch1

OR

php phpMatch4.0.1patch2

OR

php phpMatch4.0.2

OR

php phpMatch4.0.3

OR

php phpMatch4.0.3patch1

OR

php phpMatch4.0.4

OR

php phpMatch4.0.5

OR

php phpMatch4.0.6

OR

php phpMatch4.0.7

OR

php phpMatch4.0.7rc1

OR

php phpMatch4.0.7rc2

OR

php phpMatch4.0.7rc3

OR

php phpMatch4.1.0

OR

php phpMatch4.1.1

OR

php phpMatch4.1.2

OR

php phpMatch4.2dev

OR

php phpMatch4.2.0

OR

php phpMatch4.2.1

OR

php phpMatch4.2.2

OR

php phpMatch4.2.3

OR

php phpMatch4.3.0

OR

php phpMatch4.3.1

OR

php phpMatch4.3.2

OR

php phpMatch4.3.3

OR

php phpMatch4.3.4

OR

php phpMatch4.3.5

OR

php phpMatch4.3.6

OR

php phpMatch4.3.7

OR

php phpMatch4.3.8

OR

php phpMatch4.3.9

OR

php phpMatch5.0rc1

OR

php phpMatch5.0rc2

OR

php phpMatch5.0rc3

OR

php phpMatch5.0.0

OR

php phpMatch5.0.1

OR

php phpMatch5.0.2

Node

trustix secure_linuxMatch2.0

OR

trustix secure_linuxMatch2.1

OR

trustix secure_linuxMatch2.2

OR

ubuntu ubuntu_linuxMatch4.1ia64

OR

ubuntu ubuntu_linuxMatch4.1ppc

Source	Link
redhat	www.redhat.com/support/errata/RHSA-2004-687.html
mandriva	www.mandriva.com/security/advisories
securityfocus	www.securityfocus.com/advisories/9028
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10877
php	www.php.net/release_4_3_10.php
msgs	www.msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html
redhat	www.redhat.com/support/errata/RHSA-2005-032.html
bugzilla	www.bugzilla.fedora.us/show_bug.cgi
novell	www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/18517

16 Apr 2026 00:27Current

7.5High risk

Vulners AI Score7.5

CVSS 210

EPSS0.07162

cve-2004-1065 buffer overflow php exif_read_data remote code execution security vulnerability