CVE-2004-0594
No CVSS score yet. EPSS 55% chance of exploitation in the next 30 days.
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
- EPSS
- 55% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-367
- Published
- Modified
- Record from
- the NVD, synced
Affected
- avaya:converged_communications_server
- debian:debian_linux
- hp:hp-ux
- openpkg:openpkg
- php:php
- trustix:secure_linux