First published: Mon May 02 2005(Updated: )
MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL MaxDB | =7.5.00 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0083 has a severity rating that indicates it can lead to denial of service, causing application crashes.
To address CVE-2005-0083, it is recommended to upgrade to a patched version of MySQL MaxDB that resolves the identified vulnerabilities.
CVE-2005-0083 affects MySQL MaxDB version 7.5.00 and potentially earlier versions and other platforms.
CVE-2005-0083 is classified as a denial of service vulnerability that can be exploited remotely.
Yes, there are reports of remote attackers using invalid parameters to exploit CVE-2005-0083 and cause application crashes.