NVD

Id
54747  
Name
CVE-2007-2583  
Description
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-05-09  
Modified Date
2014-02-20  
Seq
2007-2583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277904 54747 CVE-2007-2583 http://bugs.mysql.com/bug.php?id=27513  View
277905 54747 CVE-2007-2583 http://lists.mysql.com/commits/23685  View
277906 54747 CVE-2007-2583 SUSE-SR:2008:003  View
277907 54747 CVE-2007-2583 oval:org.mitre.oval:def:9930  View
277908 54747 CVE-2007-2583 http://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.html  View
277909 54747 CVE-2007-2583 GLSA-200705-11  View
277910 54747 CVE-2007-2583 DSA-1413  View
277911 54747 CVE-2007-2583 30020  View
277912 54747 CVE-2007-2583 MDKSA-2007:139  View
277913 54747 CVE-2007-2583 RHSA-2008:0364  View
277914 54747 CVE-2007-2583 23911  View
277915 54747 CVE-2007-2583 2007-0017  View
277916 54747 CVE-2007-2583 USN-528-1  View
277917 54747 CVE-2007-2583 ADV-2007-1731  View
277918 54747 CVE-2007-2583 mysql-if-dos(34232)  View
277919 54747 CVE-2007-2583 https://issues.rpath.com/browse/RPL-1356  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52486 JVNDB-2007-001178 MySQL の item_cmpfunc.cc にある in_decimal::set 関数 におけるサービス運用妨害 (DoS) の脆弱性 MySQL の item_cmpfunc.cc にある in_decimal::set 関数には、巧妙に細工された IF 節によって、ゼロ除算または、Null ポインタデリファレンスが発生する脆弱性があります。 CVE-2007-2583 25938 CVE-2007-2583 54747 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001178.html 2007-05-09 2008-06-17 View