Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability - CVE-2004-0594 - Vulnerability Database
PHP

PHP Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability - CVE-2004-0594

Medium
Reference: CVE-2004-0594
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2004-0594
Title: PHP Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Overview:

The memory_limit functionality in PHP 4.x up to 4.3.7 and 5.x up to 5.0.0RC3 under certain conditions such as when register_globals is enabled allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.