| ID |
CVE-2007-3527
|
| Summary |
Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, which is treated as 0 and causes an infinite loop on zero-length data. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 6.8 (as of 31-10-2012 - 02:39) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
SINGLE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:S/C:N/I:N/A:C
|
| refmap
via4
|
| bid | 28473 | | confirm | | | debian | DSA-1529 | | osvdb | 43782 | | secunia | 29501 |
|
| Last major update |
31-10-2012 - 02:39 |
| Published |
03-07-2007 - 18:30 |
| Last modified |
31-10-2012 - 02:39 |
