CVE-2004-1065

CVE-2004-1065 describes a critical buffer overflow vulnerability in the exif_read_data function of PHP versions prior to 4.3.10 and 5.x up to 5.0.2, affecting products like openpkg, php, trustix, and ubuntu. This flaw allows remote attackers to execute arbitrary code by supplying a specially crafted image file containing an overly long section name. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and it has garnered significant community discussion with 10 mentions.