Description

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

Remediation

References

CVE-2007-2583

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7897)

MySQL CVE-2012-3144 Vulnerability (CVE-2012-3144)

WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.9.1)

WordPress Plugin WP Google Maps Multiple Cross-Site Scripting Vulnerabilities (6.0.26)

Squid Uncontrolled Resource Consumption Vulnerability (CVE-2021-28651)

Severity

Medium

Classification

CVE-2007-2583

Tags

Missing Update Known Vulnerabilities