Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."
2003-01-17T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 4.6 (MEDIUM)
AV:L/AC:L/Au:N/C:P/I:P/A:P
3.9
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | postgresql | postgresql | 6.3.2 | Yes |
| Application | postgresql | postgresql | 6.5.3 | Yes |
| Application | postgresql | postgresql | 7.0.3 | Yes |
| Application | postgresql | postgresql | 7.1 | Yes |
| Application | postgresql | postgresql | 7.1.1 | Yes |
| Application | postgresql | postgresql | 7.1.2 | Yes |
| Application | postgresql | postgresql | 7.1.3 | Yes |
| Application | postgresql | postgresql | 7.2 | Yes |
| Application | postgresql | postgresql | 7.2.1 | Yes |