CVE-2013-1861 in Oracle MySQL Server

Sumário (Inglês)

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

Reservar

19/02/2013

Divulgação

28/03/2013

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
9655	Oracle MySQL Server GIS Excesso de tampão	119	Prova de conceito	Correção oficial	CVE-2013-1861
8019	Oracle MySQL Representation Converter Excesso de tampão	119	Prova de conceito	Correção oficial	CVE-2013-1861