CVE-2010-1850

medium · 6

Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.

CVSS

21.8%

EPSS (exploit prob.)

98th

EPSS percentile

2010-06-08

Published

AV:N/AC:M/Au:S/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
mysql	mysql	5.0.0
mysql	mysql	5.0.1
mysql	mysql	5.0.2
mysql	mysql	5.0.3
mysql	mysql	5.0.4
mysql	mysql	5.0.5
mysql	mysql	5.0.5.0.21
mysql	mysql	5.0.10
mysql	mysql	5.0.15
mysql	mysql	5.0.16
mysql	mysql	5.0.17
mysql	mysql	5.0.20
mysql	mysql	5.0.24
mysql	mysql	5.0.45b
mysql	mysql	5.0.82
mysql	mysql	5.0.84
mysql	mysql	5.0.87
oracle	mysql	5.0.0
oracle	mysql	5.0.3
oracle	mysql	5.0.6
oracle	mysql	5.0.7
oracle	mysql	5.0.8
oracle	mysql	5.0.9
oracle	mysql	5.0.11
oracle	mysql	5.0.12
oracle	mysql	5.0.13
oracle	mysql	5.0.14
oracle	mysql	5.0.18
oracle	mysql	5.0.19
oracle	mysql	5.0.21
oracle	mysql	5.0.22
oracle	mysql	5.0.23
oracle	mysql	5.0.27
oracle	mysql	5.0.33
oracle	mysql	5.0.37
oracle	mysql	5.0.41
oracle	mysql	5.0.45
oracle	mysql	5.0.51
oracle	mysql	5.0.67
oracle	mysql	5.0.75

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1850