Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Numeric Errors Vulnerability - CVE-2010-3835 - Vulnerability Database
MySQL

MySQL Numeric Errors Vulnerability - CVE-2010-3835

Medium
Reference: CVE-2010-3835
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-3835
Title: MySQL Numeric Errors Vulnerability
Overview:

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY then causing the expression value to be used after the table is created which causes the expression to be re-evaluated instead of accessing its value from the table.