CVE-2007-5246

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request on TCP port 3050 to the isc_create_database function.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:firebirdsql:firebird:2.0.0.12748:*:linux:*:*:*:*:*
cpe:2.3:a:firebirdsql:firebird:2.0.0.12748:*:windows:*:*:*:*:*
cpe:2.3:a:firebirdsql:firebird:2.0.1.12855:*:linux:*:*:*:*:*
cpe:2.3:a:firebirdsql:firebird:2.0.1.12855:*:windows:*:*:*:*:*

History

No history.

Information

Published : 2007-10-06 17:17

Updated : 2023-12-10 10:40


NVD link : CVE-2007-5246

Mitre link : CVE-2007-5246

CVE.ORG link : CVE-2007-5246


JSON object : View

Products Affected

firebirdsql

  • firebird
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer