Back to CVE Browser

CVE-2007-5245

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0650%

EPSS Percentile16.69th

PublishedOct 6, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the SVC_attach function or (2) unspecified vectors involving the INET_connect function.

Affected Platforms (CPE)

📦

Firebirdsql

Firebird

= 1.5.3.4870

📦

Firebirdsql

Firebird

= 1.5.3.4870

📦

Firebirdsql

Firebird

= 1.5.4.4910

📦

Firebirdsql

Firebird

= 1.5.4.4910

References & Advisories

🔗 http://risesecurity.org/advisory/RISE-2007003/

🔗 http://risesecurity.org/blog/entry/3/

🔗 http://risesecurity.org/exploit/18/

🔗 http://secunia.com/advisories/27066

🔗 http://secunia.com/advisories/28635

🔗 http://www.risesecurity.org/advisory/RISE-2007003/

🔗 http://www.securityfocus.com/archive/1/481491/100/0/threaded

🔗 http://www.securityfocus.com/bid/25917

Related Vulnerabilities

CVE-2007-499210.0

Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execut...

CVE-2007-524610.0

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote...

CVE-2007-318110.0

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnc...

CVE-2008-046710.0

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrar...