CVE-2007-2583: Null Pointer Dereference
The indecimal::set function in itemcmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2583?
CVE-2007-2583 is rated as a medium severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2007-2583?
To fix CVE-2007-2583, upgrade MySQL to version 5.0.40 or later, or to 5.1.18-beta or later.
What types of systems are affected by CVE-2007-2583?
CVE-2007-2583 affects MySQL versions before 5.0.40 and 5.1 before 5.1.18-beta, along with specific Debian and Ubuntu Linux distributions.
What attack vector is used in CVE-2007-2583?
CVE-2007-2583 can be exploited through a crafted IF clause that leads to a divide-by-zero error.
What impact does CVE-2007-2583 have on MySQL services?
CVE-2007-2583 can crash MySQL services, resulting in a denial of service for users.