CVE-2006-6201: Borland Software C++ Builder

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.

Affected products

• Borland Software C++ Builder: version 5.x only; version 6.x only; version 2006 only
• Borland Software C Builder: version 2006 only
• Borland Software Delphi: version 5.x only; version 6.x only; version 7.x only; version 2006 only
• Borland Software Developer Studio: version 2006 only
• Borland Software IDSQL32.DLL: version 5.1.0.2 only; version 5.1.0.4 only
• Revilloc Mailserver: any version

Published 2006-12-01. Last modified 2026-06-16.