CVE-2007-5243

CRITICAL ⚠ Exploit

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service...

Affects 1 product across 1 vendor.

CVSS 2.09.3
EPSS40.1%
Percentile99th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network.
CWE Weakness Definitions
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

Multiple stack-based buffer overflows in Borland InterBase LI and WI versions allow remote attackers to execute arbitrary code through specific service requests on TCP port 3050.

BSID: BS-2007-GLOBAL-158889-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2007-5243?
Multiple stack-based buffer overflows in Borland InterBase LI and WI versions allow remote attackers to execute arbitrary code through specific service requests on TCP port 3050.
What is the CVSS score for CVE-2007-5243?
CVE-2007-5243 has CVSS 9.3 (Critical). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS: 40.1%.
Is CVE-2007-5243 actively exploited?
Public exploit available for CVE-2007-5243. Exploitation risk elevated.
How do I remediate CVE-2007-5243?
Priority: IMMEDIATE.
What systems are affected by CVE-2007-5243?
CVE-2007-5243 affects Borland Software Interbase.
Vulnerability Details
CVE IDCVE-2007-5243
BSIDBS-2007-GLOBAL-158889-C BreachSpider Global ID
CVSS VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Published2007-10-06
Last Modified2026-06-16
ICS Relevance15%
Weakness (CWE)
Improper Restriction of Operations within Memory Buffer
SourceNVD
Official Description

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerabilities are triggered by sending a long service attach request or a long create request to the respective functions (SVC_attach, INET_connect, isc_create_database, jrd8_create_database) on TCP port 3050. This can lead to arbitrary code execution with the privileges of the InterBase service.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Borland Software Interbase li_8.0.0.53 li_8.0.0.54 li_8.0.0.253 wi-o6.0.1.6 wi-o6.0.2.0 wi-v5.1.1.680
+11 morewi-v5.5.0.742 wi-v6.0.0.627 wi-v6.0.1.0 wi-v6.0.1.6 wi-v6.5.0.28 wi-v7.0.1.1 wi-v7.5.0.129 wi-v7.5.1.80 wi-v8.0.0.123 wi_5.1.1.680 wi_8.1.0.257
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 6949 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Borland Software
CVE-2001-0008 10.0 Backdoor account in Interbase database server allows remote attackers to over... CVE-2007-5244 9.3 Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.25... CVE-2004-1833 7.5 The admin.ib file in Borland Interbase 7.1 for Linux has default world writab... CVE-2004-0204 7.5 Directory traversal vulnerability in the web viewers for Business Objects Cry... CVE-2006-6201 7.5 Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by Revillo...
View all Borland Software CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.3 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →