Unscored severity · published May 11, 2007
CVE-2007-2606
Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1)…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp. NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firebird · Firebirdsql
2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2606
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2606
osvdb.org
http://osvdb.org/37308
osvdb.org
http://osvdb.org/37309
secunia.com
http://secunia.com/advisories/29501
securityreason.com
http://securityreason.com/securityalert/2708
www.debian.org
http://www.debian.org/security/2008/dsa-1529
www.securityfocus.com
http://www.securityfocus.com/archive/1/468070/100/0/threaded
More from Firebird
9.9
CVE-2026-40342
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
8.8
CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
8.8
CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement
8.8
CVE-2017-6369
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from…
8.2
CVE-2026-28224
Firebird Null Pointer Dereference via CryptCallback causes DOS