Unrated severityNVD Advisory· Published Oct 6, 2007· Updated Apr 23, 2026
CVE-2007-5243
CVE-2007-5243
Description
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
Affected products
17cpe:2.3:a:borland_software:interbase:li_8.0.0.53:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:borland_software:interbase:li_8.0.0.53:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:li_8.0.0.54:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:li_8.0.0.253:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-o6.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-o6.0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v5.1.1.680:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v5.5.0.742:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v6.0.0.627:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v6.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v6.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v6.5.0.28:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v7.0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v7.5.0.129:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v7.5.1.80:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi-v8.0.0.123:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi_5.1.1.680:*:*:*:*:*:*:*
- cpe:2.3:a:borland_software:interbase:wi_8.1.0.257:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
18- risesecurity.org/exploit/14/nvdExploit
- risesecurity.org/exploit/15/nvdExploit
- risesecurity.org/exploit/9/nvdExploit
- www.securityfocus.com/bid/25917nvdExploit
- osvdb.org/38605nvd
- osvdb.org/38606nvd
- osvdb.org/38607nvd
- osvdb.org/38608nvd
- osvdb.org/38609nvd
- risesecurity.org/advisory/RISE-2007002/nvd
- risesecurity.org/blog/entry/3/nvd
- risesecurity.org/exploit/10/nvd
- risesecurity.org/exploit/12/nvd
- risesecurity.org/exploit/13/nvd
- secunia.com/advisories/27058nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/3381nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/36956nvd
News mentions
0No linked articles in our index yet.