VDB
CVE-2007-4992
CVE-2007-4992
PUBLISHED
CVSS 10 CRITICAL
Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.
EPSS 7.69% · 94.5th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
7.69%
94.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| firebirdsql | firebird | 2.0.2 |
Timeline
- Oct 10, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- firebirdsql-processpacket-bo(37079) vdb
- 1018802 vdb
- 26011 vdb
- http://bugs.gentoo.org/show_bug.cgi?id=195569 url
- http://www.zerodayinitiative.com/advisories/ZDI-07-057.html url
- 20071010 ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability mailing-list
- GLSA-200712-06 vendor-advisory
- 27982 third-party-advisory
- http://www.firebirdsql.org/rlsnotes/Firebird-2.0.3-ReleaseNotes.pdf url
- https://nvd.nist.gov/vuln/detail/CVE-2007-4992 advisory