CVE-2008-0912 describes multiple heap-based buffer overflows in mlsrv10.exe within Sybase MobiLink 10.0.1.3629 and earlier, including SQL Anywhere Developer Edition 10.0.1.3415. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service by providing overly long usernames, version strings, or remote IDs. With a CVSS score of 10.0, this vulnerability is critical, indicating a network-based attack with low complexity and no authentication required, leading to complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 97/100, further emphasizing its high severity. While not listed on the KEV catalog, an exploit for this vulnerability (EDB-31271) is publicly available on ExploitDB. Despite its age and high severity, there is no recorded social media discussion or media coverage, suggesting limited community attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.0.1.3629CPE matchmatch criteria | cpe:2.3:a:sybase:mobilink:*:*:*:*:*:*:*:* | ||
10.0.1.3415CPE matchmatch criteria | cpe:2.3:a:sybase:sql_anywhere:10.0.1.3415:*:developer_edition:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.