CVE ID | CVE-2015-3659 |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
SQLite |
AFFECTED PRODUCTS |
SQLite |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['19803']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists within the handling of DEFAULT expressions for column values. The issue lies in the ability to create a table that will execute privileged functions by specifying a DEFAULT value for a column and then inserting into the table. An attacker can leverage this vulnerability to execute restricted SQL statements under the context of the current process. |
ADDITIONAL DETAILS |
SQLite has issued an update to correct this vulnerability. More details can be found at:
http://support.apple.com/kb/HT201222 |
DISCLOSURE TIMELINE |
|
CREDIT | Peter Rutenbar |