CVE-2013-2492
NoneCVSS
—
EPSS
42.2%
Published
Mar 15, 2013
CISA due date
—
The record
Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | firebird2.1 | 0 | 2.1.3.18185-0.ds1-11+squeeze1 |
| Debian:6.0 | firebird2.5 | 0 | 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze1 |
| Ubuntu:14.04:LTS | firebird2.5 | 0 | 2.5.2.26540.ds4-8ubuntu1 |
Related vulnerabilities
- CVE-2014-9323 The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows… Also affects firebird2.1
- CVE-2017-6369 Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before… Also affects firebird2.5
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90801 A security flaw has been discovered in GNU Binutils 2.47. CWE-119