Skip to content

CVE-2004-1065

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...

10.0 HighFix available

CVE-2004-1065 is a high vulnerability (CVSS 10.0) in Php, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.0%, the 95th percentile. Fixed in php 0:4.3.2-19.ent.

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Exploit likelihood

10.0%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Record: CVE-2004-1065
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Record: CVE-2004-1065
Updated: 2026-11-02

EUVDEUVD-2004-1063 No score

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Record: EUVD-2004-1063
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vhmx-6whg-m8hv No score

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Record: GHSA-vhmx-6whg-m8hv
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-devel` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-imap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-ldap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-mysql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-odbc` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-pgsql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent

Show 82 moreShow less

Affected packages
Package	Affected	Fixed
`php-devel` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-imap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-ldap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-mysql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-odbc` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-pgsql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-devel` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-imap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-ldap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-mysql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-odbc` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-pgsql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-devel` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-imap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-ldap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-mysql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-odbc` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php-pgsql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-19.ent	0:4.3.2-19.ent
`php` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-devel` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-domxml` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-gd` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-imap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ldap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mbstring` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mysql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ncurses` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-odbc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pear` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pgsql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-snmp` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-xmlrpc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.2	0:4.3.9-3.2
`php` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-devel` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-domxml` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-gd` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-imap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ldap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mbstring` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mysql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ncurses` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-odbc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pear` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pgsql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-snmp` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-xmlrpc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.2	0:4.3.9-3.2
`php` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-devel` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-domxml` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-gd` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-imap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ldap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mbstring` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mysql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ncurses` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-odbc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pear` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pgsql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-snmp` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-xmlrpc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.2	0:4.3.9-3.2
`php` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-devel` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-domxml` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-gd` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-imap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ldap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mbstring` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-mysql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-ncurses` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-odbc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pear` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-pgsql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-snmp` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2
`php-xmlrpc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.2	0:4.3.9-3.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 38 moreShow less