Description

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

Remediation

References

CVE-2007-2583

Related Vulnerabilities

Oracle JRE CVE-2013-0441 Vulnerability (CVE-2013-0441)

concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-4721)

Oracle HTTP Server Other Vulnerability (CVE-2020-35167)

Oracle Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2002-2347)

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-40572)

Severity

Medium

Classification

CVE-2007-2583

Tags

Missing Update Known Vulnerabilities