OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear.
References
Link | Resource |
---|---|
http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt | Exploit |
Configurations
Information
Published : 2007-11-09 18:46
Updated : 2008-09-04 21:00
NVD link : CVE-2007-5928
Mitre link : CVE-2007-5928
JSON object : View
CWE
NVD-CWE-noinfo
CWE-20
Improper Input Validation
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
openbase_international_ltd
- openbase