New Search

The memory_limit functionality in PHP 4.x up to 4.3.7 and 5.x up to 5.0.0RC3 under certain conditions such as when register_globals is enabled allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

oval:org.mitre.oval:def:10896

The memory_limit functionality in PHP 4.x up to 4.3.7 and 5.x up to 5.0.0RC3 under certain conditions such as when register_globals is enabled allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

Family:
unix
Status:
ACCEPTED
Platform(s):
  • CentOS Linux 3
  • Red Hat Enterprise Linux 3
Class:
vulnerability
Reference(s):
  • CVE-2004-0594
Product(s):