MySQL Other Vulnerability - CVE-2009-0819
sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via quotan XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()quot which triggers an assertion failure.