Back to CVE Browser

CVE-2007-5246

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0480%

EPSS Percentile25.86th

PublishedOct 6, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request on TCP port 3050 to the isc_create_database function.

Affected Platforms (CPE)

📦

Firebirdsql

Firebird

= 2.0.0.12748

📦

Firebirdsql

Firebird

= 2.0.0.12748

📦

Firebirdsql

Firebird

= 2.0.1.12855

📦

Firebirdsql

Firebird

= 2.0.1.12855

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=195569

🔗 http://risesecurity.org/advisory/RISE-2007003/

🔗 http://risesecurity.org/blog/entry/3/

🔗 http://risesecurity.org/exploit/16/

🔗 http://risesecurity.org/exploit/17/

🔗 http://secunia.com/advisories/27057

🔗 http://secunia.com/advisories/27982

🔗 http://security.gentoo.org/glsa/glsa-200712-06.xml

Related Vulnerabilities

CVE-2007-499210.0

Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execut...

CVE-2007-524510.0

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote att...

CVE-2007-318110.0

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnc...

CVE-2008-046710.0

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrar...