CVE-2004-0594
Fixed in a distro release EPSS 55%
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
Products: openpkg, debian_linux, hp-ux, trustix secure_linux, php
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | php3 | 3:3.0.18-23.1woody2 |
| Debian 3.0 | php4 | 4.1.2-7 |
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-11.1.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-11.1.ent |