Description
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
References
- CLA-2002:524 vendor-advisory
- 20020819 @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL mailing-list
- 8034 third-party-advisory
- 5497 vdb-entry
- RHSA-2003:001 vendor-advisory
- postgresql-cashwords-bo(9891) vdb-entry
- http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52