CVE-2004-0594 - CVE House
Back to Database
Status published Medium CVE-2004-0594

The memory_limit functionality in PHP 4.x up to 4.3.7, and...

Vulnerability Description

The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0594

Credits & Attribution

No credits recorded in the NVD database.

References

More from openpkg

View All →
CVE-2004-1065
Buffer overflow in the exif_read_data function in PHP before 4.3.10...
Critical 10
CVE-2004-1019
The deserialization code in PHP before 4.3.10 and PHP 5.x...
Critical 10
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local...
Medium 6.8
CVE-2004-0918
The asn_parse_header function (asn1.c) in the SNMP module for Squid...
Medium 5
CVE-2004-0413
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1)...
Critical 10

Affected Vendor

Affected Software

openpkg, converged communications server, debian linux, hp-ux, secure linux, php
Vulnerable Versions:
2.0, 2.1, 3.0, b.11.00, b.11.11, b.11.22, b.11.23, 1.5, 4.0, 5.0.0

Timeline

Official Publish: July 16th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.