CyberRota Analysis
AI-GeneratedThe MongoDB Connector for BI ODBC driver is vulnerable to a buffer overflow due to unbounded cursor name lengths in SQL submissions, which can lead to memory corruption. This vulnerability can cause the hosting application to crash and potentially allow arbitrary code execution. Organizations using this driver should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message, memory adjacent to that buffer is overwritten with user-supplied content. This can terminate the hosting application process and may allow unintended code to run within it.
Related CVEs
Other vulnerabilities affecting the same vendor(s)