CVE-2008-0387

2008-01-2902:00:00

CWE-189

[email protected]

web.nvd.nist.gov

cve

2008

0387

integer overflow

firebird sql

remote attackers

arbitrary code execution

memory corruption

nvd

8.1 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.924 High

EPSS

Percentile

99.0%

JSON

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.

CPENameOperatorVersion
firebirdsql:firebirdfirebirdsql firebirdle1.0.3
firebirdsql:firebirdfirebirdsql firebirdlt2.0.4
firebirdsql:firebirdfirebirdsql firebirdeq2.1.0
firebirdsql:firebirdfirebirdsql firebirdlt1.5.6

CPE	Name	Operator	Version
firebirdsql:firebird	firebirdsql firebird	le	1.0.3
firebirdsql:firebird	firebirdsql firebird	lt	2.0.4
firebirdsql:firebird	firebirdsql firebird	eq	2.1.0
firebirdsql:firebird	firebirdsql firebird	lt	1.5.6