CyberSec.Space Logo
Back to CVE Browser

CVE-2007-4992

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1560%
EPSS Percentile41.04th
PublishedOct 11, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.

Affected Platforms (CPE)

📦
Firebirdsql

Firebird

= 2.0.2

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=195569
🔗 http://secunia.com/advisories/27982
🔗 http://security.gentoo.org/glsa/glsa-200712-06.xml
🔗 http://securitytracker.com/id?1018802
🔗 http://www.firebirdsql.org/rlsnotes/Firebird-2.0.3-ReleaseNotes.pdf
🔗 http://www.securityfocus.com/archive/1/482025/100/0/threaded
🔗 http://www.securityfocus.com/bid/26011
🔗 http://www.zerodayinitiative.com/advisories/ZDI-07-057.html

Related Vulnerabilities

CVE-2007-524610.0

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote...

CVE-2007-524510.0

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote att...

CVE-2007-318110.0

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnc...

CVE-2008-046710.0

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrar...