Revision Date: | 2013-04-29 | Version: | 12 |
Title: | The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference. |
Description: | The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference. |
Family: | unix | Class: | vulnerability |
Status: | ACCEPTED | Reference(s): | CVE-2007-2583
|
Platform(s): | CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5
| Product(s): | |
Definition Synopsis |
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5
OR The operating system installed on the system is CentOS Linux 5.x
OR Oracle Linux 5.x
AND Configuration section
mysql is earlier than 0:5.0.45-7.el5
OR mysql-devel is earlier than 0:5.0.45-7.el5
OR mysql-test is earlier than 0:5.0.45-7.el5
OR mysql-bench is earlier than 0:5.0.45-7.el5
OR mysql-server is earlier than 0:5.0.45-7.el5
|