CVE-2007-1888
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.5%
Buffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite without this vulnerability. The SQLite developer has argued that this issue could be due to a misuse of the sqlite_decode_binary() API.
Produtos afetados
n/a · n/aReferências
http://osvdb.org/39177http://secunia.com/advisories/25057https://exchange.xforce.ibmcloud.com/vulnerabilities/38518http://www.attrition.org/pipermail/vim/2007-April/001540.htmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:091http://www.php-security.org/MOPB/MOPB-41-2007.htmlhttp://www.sqlite.org/cvstrac/rlog?f=sqlite/src/encode.chttp://www.ubuntu.com/usn/usn-455-1