Description

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

Remediation

References

CVE-2007-2583

Related Vulnerabilities

XWiki Improper Preservation of Permissions Vulnerability (CVE-2021-21379)

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9476)

Mailman Other Vulnerability (CVE-2004-1143)

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Information Disclosure (2.7.6)

PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2007-4652)

Severity

Medium

Classification

CVE-2007-2583

Tags

Missing Update Known Vulnerabilities