CVE-2004-1019

CVE-2004-1019 is a critical deserialization vulnerability affecting PHP versions prior to 4.3.10 and 5.x up to 5.0.2, impacting products like openpkg, php, trustix, and ubuntu. This flaw allows remote attackers to trigger information disclosure, double-free errors, and array underflows through untrusted data passed to the unserialize function. With a CVSS score of 10.0, it presents a severe risk of denial of service and arbitrary code execution due to its network-based attack vector and low attack complexity. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.