CVE-2007-5244

CRITICAL ⚠ Exploit

Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long a...

Affects 1 product across 1 vendor.

CVSS 2.09.3
EPSS37.5%
Percentile99th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network.
CWE Weakness Definitions
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A stack-based buffer overflow vulnerability exists in Borland InterBase LI versions 8.0.0.53 through 8.1.0.253 on Linux and possibly other versions on Solaris. This vulnerability can be exploited by remote attackers to execute arbitrary code.

BSID: BS-2007-GLOBAL-158890-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2007-5244?
A stack-based buffer overflow vulnerability exists in Borland InterBase LI versions 8.0.0.53 through 8.1.0.253 on Linux and possibly other versions on Solaris. This vulnerability can be exploited by remote attackers to execute arbitrary code.
What is the CVSS score for CVE-2007-5244?
CVE-2007-5244 has CVSS 9.3 (Critical). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS: 37.5%.
Is CVE-2007-5244 actively exploited?
Public exploit available for CVE-2007-5244. Exploitation risk elevated.
How do I remediate CVE-2007-5244?
Priority: IMMEDIATE.
What systems are affected by CVE-2007-5244?
CVE-2007-5244 affects Borland Software Interbase.
Vulnerability Details
CVE IDCVE-2007-5244
BSIDBS-2007-GLOBAL-158890-C BreachSpider Global ID
CVSS VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Published2007-10-06
Last Modified2026-06-16
ICS Relevance15%
Weakness (CWE)
SourceNVD
Official Description

Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered by a long attach request sent to the open_marker_file function on TCP port 3050. An attacker can exploit this to execute arbitrary code with the privileges of the InterBase service.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Borland Software Interbase li_8.0.0.53 li_8.0.0.54 li_8.0.0.253
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 6949 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Borland Software
CVE-2001-0008 10.0 Backdoor account in Interbase database server allows remote attackers to over... CVE-2007-5243 9.3 Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 throug... CVE-2004-1833 7.5 The admin.ib file in Borland Interbase 7.1 for Linux has default world writab... CVE-2004-0204 7.5 Directory traversal vulnerability in the web viewers for Business Objects Cry... CVE-2006-6201 7.5 Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by Revillo...
View all Borland Software CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.3 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →