CVE-2004-1065 : Detail

CVE-2004-1065

12.57%V3
Network
2004-12-22
04h00 +00:00
2017-10-09
22h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 10 AV:N/AC:L/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Openpkg>>Openpkg >> Version 2.1

Openpkg>>Openpkg >> Version 2.2

Openpkg>>Openpkg >> Version current

    Php>>Php >> Version 3.0

    Php>>Php >> Version 3.0.1

    Php>>Php >> Version 3.0.2

    Php>>Php >> Version 3.0.3

    Php>>Php >> Version 3.0.4

    Php>>Php >> Version 3.0.5

    Php>>Php >> Version 3.0.6

    Php>>Php >> Version 3.0.7

    Php>>Php >> Version 3.0.8

    Php>>Php >> Version 3.0.9

    Php>>Php >> Version 3.0.10

    Php>>Php >> Version 3.0.11

    Php>>Php >> Version 3.0.12

    Php>>Php >> Version 3.0.13

    Php>>Php >> Version 3.0.14

    Php>>Php >> Version 3.0.15

    Php>>Php >> Version 3.0.16

    Php>>Php >> Version 3.0.17

    Php>>Php >> Version 3.0.18

    Php>>Php >> Version 4.0

    Php>>Php >> Version 4.0.1

    Php>>Php >> Version 4.0.1

    Php>>Php >> Version 4.0.1

    Php>>Php >> Version 4.0.2

    Php>>Php >> Version 4.0.3

    Php>>Php >> Version 4.0.3

    Php>>Php >> Version 4.0.4

    Php>>Php >> Version 4.0.5

    Php>>Php >> Version 4.0.6

    Php>>Php >> Version 4.0.7

    Php>>Php >> Version 4.0.7

    Php>>Php >> Version 4.0.7

    Php>>Php >> Version 4.0.7

    Php>>Php >> Version 4.1.0

    Php>>Php >> Version 4.1.1

    Php>>Php >> Version 4.1.2

    Php>>Php >> Version 4.2

      Php>>Php >> Version 4.2.0

      Php>>Php >> Version 4.2.1

      Php>>Php >> Version 4.2.2

      Php>>Php >> Version 4.2.3

      Php>>Php >> Version 4.3.0

      Php>>Php >> Version 4.3.1

      Php>>Php >> Version 4.3.2

      Php>>Php >> Version 4.3.3

      Php>>Php >> Version 4.3.4

      Php>>Php >> Version 4.3.5

      Php>>Php >> Version 4.3.6

      Php>>Php >> Version 4.3.7

      Php>>Php >> Version 4.3.8

      Php>>Php >> Version 4.3.9

      Php>>Php >> Version 5.0

        Php>>Php >> Version 5.0

          Php>>Php >> Version 5.0

            Php>>Php >> Version 5.0.0

            Php>>Php >> Version 5.0.1

            Php>>Php >> Version 5.0.2

            Configuraton 0

            Trustix>>Secure_linux >> Version 2.0

            Trustix>>Secure_linux >> Version 2.1

            Trustix>>Secure_linux >> Version 2.2

            Ubuntu>>Ubuntu_linux >> Version 4.1

              Ubuntu>>Ubuntu_linux >> Version 4.1

                References

                http://www.redhat.com/support/errata/RHSA-2005-032.html
                Tags : vendor-advisory, x_refsource_REDHAT
                http://www.php.net/release_4_3_10.php
                Tags : x_refsource_CONFIRM
                http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
                Tags : vendor-advisory, x_refsource_MANDRAKE
                https://bugzilla.fedora.us/show_bug.cgi?id=2344
                Tags : vendor-advisory, x_refsource_FEDORA
                http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html
                Tags : vendor-advisory, x_refsource_OPENPKG
                http://www.securityfocus.com/advisories/9028
                Tags : vendor-advisory, x_refsource_HP
                http://www.redhat.com/support/errata/RHSA-2004-687.html
                Tags : vendor-advisory, x_refsource_REDHAT