CVE-2007-2606: Firebirdsql Firebird

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp. NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE.

Affected products

• Firebirdsql Firebird: version 2.1 only

Published 2007-05-11. Last modified 2026-06-16.