CVE-2002-1397

CVE-2002-1397 describes a vulnerability in the cash_words() function of PostgreSQL versions 7.2 and earlier. A local attacker can exploit this flaw by providing a large negative argument, potentially leading to a denial of service or arbitrary code execution due to an integer signedness error or buffer overflow. This vulnerability carries a CVSS score of 7.5, indicating high severity with network access, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, with 10 mentions across various platforms.