CVE-2007-5243
HIGH 9.3EPSS 40.1%
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
- CVSS v2.0
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 40.06% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2007-10-06
- Updated
- 2024-08-07
Proof-of-concept exploits (6)
- http://risesecurity.org/exploit/10/
- http://risesecurity.org/exploit/9/
- http://risesecurity.org/exploit/13/
- http://risesecurity.org/exploit/15/
- http://risesecurity.org/exploit/14/
- http://risesecurity.org/exploit/12/
Metasploit modules (1)
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/16844
- https://www.exploit-db.com/exploits/16843
- https://www.exploit-db.com/exploits/16839
- https://www.exploit-db.com/exploits/16449
- https://www.exploit-db.com/exploits/16447
- https://www.exploit-db.com/exploits/16440
- https://www.exploit-db.com/exploits/16437
- https://www.exploit-db.com/exploits/16432