Description
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-3653 Vulnerability (CVE-2017-3653)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2901)
Oracle Application Server CVE-2007-5523 Vulnerability (CVE-2007-5523)
PHP Use After Free Vulnerability (CVE-2015-6831)
WordPress Plugin WP Ad Guru Lite Cross-Site Scripting (1.6.0)