CVE-2010-3840 in MySQL
Summary
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
Reservation
10/07/2010
Disclosure
01/14/2011
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56085 | MySQL init_from_wkb denial of service | 404 | Proof-of-Concept | Official fix | CVE-2010-3840 |