CVE-2007-1888
- Source
- https://cve.org/CVERecord?id=CVE-2007-1888
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2007-1888.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2007-1888
- Withdrawn
- 2024-06-30T15:57:24.200401Z
- Published
- 2007-04-06T01:19:00Z
- Modified
- 2024-06-04T04:00:19Z
- Summary
- [none]
- Details
-
Buffer overflow in the sqlitedecodebinary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite without this vulnerability. The SQLite developer has argued that this issue could be due to a misuse of the sqlitedecodebinary() API.
- References
-
- http://secunia.com/advisories/25057
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:091
- http://www.php-security.org/MOPB/MOPB-41-2007.html
- http://www.ubuntu.com/usn/usn-455-1
- http://osvdb.org/39177
- http://www.attrition.org/pipermail/vim/2007-April/001540.html
- http://www.sqlite.org/cvstrac/rlog?f=sqlite/src/encode.c
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38518
Affected packages
Debian:10 / sqlite
Package
- Name
- sqlite
- Purl
- pkg:deb/debian/sqlite?arch=source