CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

45.87% chance of exploitation in the next 30 days, 99th percentile

Published

2008-01-29

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31050

References

• CVE Record
• NVD entry

Related

• CVE-2008-0384
• CVE-2008-0388
• CVE-2008-0383
• CVE-2008-0390
• CVE-2008-0382
• CVE-2008-0391