SQLite Multiple Remote Heap Overflow Vulnerabilities
BID:74655
Info
SQLite Multiple Remote Heap Overflow Vulnerabilities
| Bugtraq ID: | 74655 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 12 2015 12:00AM |
| Updated: | May 12 2015 12:00AM |
| Credit: | Hanno Böck |
| Vulnerable: |
SQLite SQLite 3.8.9 |
| Not Vulnerable: |
SQLite SQLite 3.8.10.1 |
Discussion
SQLite Multiple Remote Heap Overflow Vulnerabilities
SQLite is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input.
Successfully exploiting these issues allows attackers to execute arbitrary code with the privileges of a user running the application. Failed exploit attempts will result in a denial-of-service condition.
SQLite is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input.
Successfully exploiting these issues allows attackers to execute arbitrary code with the privileges of a user running the application. Failed exploit attempts will result in a denial-of-service condition.
References
SQLite Multiple Remote Heap Overflow Vulnerabilities
References:
References:
- SQLite Homepage (SQLite)
- Two invalid read errors / heap overflows in SQLite (TFPA 006/2015) (Hanno Böck)