CVE-2007-2583
- State
- Published
- Severity
- Not scored
- Published
- May 9, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 9, 2007
Description
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2007-1731vdb-entry
- 27823third-party-advisory
- 25196third-party-advisory
- 25188third-party-advisory
- https://issues.rpath.com/browse/RPL-1356
- 25389third-party-advisory
- 2007-0017vendor-advisory
- mysql-if-dos(34232)vdb-entry
- GLSA-200705-11vendor-advisory
- http://bugs.mysql.com/bug.php?id=27513
- 30020exploit
- 25946third-party-advisory
- 23911vdb-entry
- DSA-1413vendor-advisory
- http://lists.mysql.com/commits/23685
- USN-528-1vendor-advisory
- MDKSA-2007:139vendor-advisory
- oval:org.mitre.oval:def:9930vdb-entrysignature
- 30351third-party-advisory
- 27155third-party-advisory
- 34734vdb-entry
- 25255third-party-advisory
- 28838third-party-advisory
- SUSE-SR:2008:003vendor-advisory
- RHSA-2008:0364vendor-advisory
- http://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.