Database Mysql IF Query DoS

Publish date: July 21, 2015
  Severity: MEDIUM
  CVE Identifier: CVE-2007-2583
  Advisory Date: JUL 21, 2015

  DESCRIPTION

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000997
  Trend Micro Deep Security DPI Rule Name: 1000997 - Database Mysql IF Query DoS

  AFFECTED SOFTWARE AND VERSION

  • MySQL MySQL 5.0.0-0
  • MySQL MySQL 5.0.0-alpha
  • MySQL MySQL 5.0.1
  • MySQL MySQL 5.0.10
  • MySQL MySQL 5.0.10a
  • MySQL MySQL 5.0.11
  • MySQL MySQL 5.0.12
  • MySQL MySQL 5.0.13
  • MySQL MySQL 5.0.14
  • MySQL MySQL 5.0.15
  • MySQL MySQL 5.0.15a
  • MySQL MySQL 5.0.16
  • MySQL MySQL 5.0.16a
  • MySQL MySQL 5.0.17
  • MySQL MySQL 5.0.17a
  • MySQL MySQL 5.0.18
  • MySQL MySQL 5.0.19
  • MySQL MySQL 5.0.1a
  • MySQL MySQL 5.0.2
  • MySQL MySQL 5.0.20
  • MySQL MySQL 5.0.20a
  • MySQL MySQL 5.0.21
  • MySQL MySQL 5.0.22
  • MySQL MySQL 5.0.22-1-0.1
  • MySQL MySQL 5.0.24
  • MySQL MySQL 5.0.27
  • MySQL MySQL 5.0.3
  • MySQL MySQL 5.0.3-Beta
  • MySQL MySQL 5.0.33
  • MySQL MySQL 5.0.37
  • MySQL MySQL 5.0.3a
  • MySQL MySQL 5.0.4
  • MySQL MySQL 5.0.4a
  • MySQL MySQL 5.0.5
  • MySQL MySQL 5.0.5.0.21
  • MySQL MySQL 5.0.6
  • MySQL MySQL 5.0.7
  • MySQL MySQL 5.0.8
  • MySQL MySQL 5.0.9

Featured Stories