{ "schema_version": "1.4.0", "id": "GHSA-cm4p-rvrm-3xfj", "modified": "2025-04-09T03:46:58Z", "published": "2022-05-01T18:31:29Z", "aliases": [ "CVE-2007-5243" ], "details": "Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5243" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36956" }, { "type": "WEB", "url": "http://osvdb.org/38605" }, { "type": "WEB", "url": "http://osvdb.org/38606" }, { "type": "WEB", "url": "http://osvdb.org/38607" }, { "type": "WEB", "url": "http://osvdb.org/38608" }, { "type": "WEB", "url": "http://osvdb.org/38609" }, { "type": "WEB", "url": "http://risesecurity.org/advisory/RISE-2007002" }, { "type": "WEB", "url": "http://risesecurity.org/blog/entry/3" }, { "type": "WEB", "url": "http://risesecurity.org/exploit/10" }, { "type": "WEB", "url": "http://risesecurity.org/exploit/12" }, { "type": "WEB", "url": "http://risesecurity.org/exploit/13" }, { "type": "WEB", "url": "http://risesecurity.org/exploit/14" }, { "type": "WEB", "url": "http://risesecurity.org/exploit/15" }, { "type": "WEB", "url": "http://risesecurity.org/exploit/9" }, { "type": "WEB", "url": "http://secunia.com/advisories/27058" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/25917" }, { "type": "WEB", "url": "http://www.securitytracker.com/id?1018772" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2007/3381" } ], "database_specific": { "cwe_ids": [ "CWE-119" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2007-10-06T17:17:00Z" } }