VDB
CVE-2007-5246
CVE-2007-5246
PUBLISHED
CVSS 10 CRITICAL
Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request on TCP port 3050 to the isc_create_database function.
EPSS 24.55% · 96.2th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
24.55%
96.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| firebirdsql | firebird | 2.0.0.12748, 2.0.0.12748, 2.0.1.12855 |
| n/a | n/a | n/a |
Timeline
- Oct 6, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
References
- http://risesecurity.org/advisory/RISE-2007003/ url
- 25917 vdb
- 27057 third-party-advisory
- http://risesecurity.org/blog/entry/3/ url
- 20071004 [RISE-2007003] Firebird Relational Database Multiple Buffer Overflow Vulnerabilities mailing-list
- 1018773 vdb
- ADV-2007-3379 vdb
- firebird-attach-create-bo(36958) vdb
- http://risesecurity.org/exploit/16/ url
- GLSA-200712-06 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=195569 url
- 25925 vdb
- http://risesecurity.org/exploit/17/ url
- 27982 third-party-advisory
- http://www.risesecurity.org/advisory/RISE-2007003/ url
- https://nvd.nist.gov/vuln/detail/CVE-2007-5246 advisory
- http://risesecurity.org/advisory/RISE-2007003 url
- http://risesecurity.org/blog/entry/3 url
- http://risesecurity.org/exploit/16 url
- http://risesecurity.org/exploit/17 url
…and 1 more