peter bassill · operator
$ cve CVE-2007-5243 JSON

CVE-2007-5243 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 40.1% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS40.06% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2007-10-06
Last modified2026-06-16

Affected (1)

VendorProduct
borland softwareinterbase

Public exploits

SourceTitleDate
exploit-dbFirebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbFirebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase - 'isc_create_database()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbFirebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase - 'SVC_attach()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase - 'PWD_db_aliased()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase - 'jrd8_create_database()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase - 'INET_connect()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbBorland Interbase 2007/2007 SP2 - 'jrd8_create_database' Remote Buffer Overflow (Metasploit)2007-10-03
exploit-dbBorland Interbase 2007/2007 SP2 - 'INET_connect' Remote Buffer Overflow (Metasploit)2007-10-03
exploit-dbBorland Interbase 2007 - 'PWD_db_aliased' Remote Buffer Overflow (Metasploit)2007-10-03

References

→ the Explorer  ·  watch your stack  ·  NVD