Description
Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.
References
- borland-idsql32-bo(30583) vdb-entry
- 22570 third-party-advisory
- ADV-2006-4763 vdb-entry
- http://secunia.com/secunia_research/2006-70/advisory/
- 21342 vdb-entry
- 20061129 Secunia Research: Borland Products idsql32.dll Buffer OverflowVulnerability mailing-list