CVE-2013-3969

The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

10.11% chance of exploitation in the next 30 days, 95th percentile

Published

2013-10-01

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38669

References

• CVE Record
• NVD entry

Related

• CVE-2013-3963
• CVE-2013-3975
• CVE-2013-3961
• CVE-2013-3977
• CVE-2013-3960
• CVE-2013-3982