CVE-2007-2583

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18...

4.0 MediumPublic exploit

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

Exploit likelihood

11.3%Up 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 4.0

Record: CVE-2007-2583
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-2583
Updated: 2026-11-02

EUVDEUVD-2007-2576 No score

Record: EUVD-2007-2576
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hf23-jpgj-4fhg No score

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18...

Record: GHSA-hf23-jpgj-4fhg
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`mysql-dfsg-5.0` Debian:4.0 From an advisory covering 6 CVEs	before 5.0.32-7etch3, plus listed versions 5.0.32-7etch15.0.32-7etch3~bpo31+1	5.0.32-7etch3
`mysql-dfsg` Debian:3.1 From an advisory covering 6 CVEs	before 4.0.24-10sarge3, plus listed versions 4.0.24-104.0.24-10sarge14.0.24-10sarge2	4.0.24-10sarge3
`mysql-dfsg-4.1` Debian:3.1 From an advisory covering 6 CVEs	before 4.1.11a-4sarge8, plus listed versions 4.1.11a-44.1.11a-4sarge14.1.11a-4sarge24.1.11a-4sarge34.1.11a-4sarge44.1.11a-4sarge54.1.11a-4sarge7	4.1.11a-4sarge8
`mysql` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-bench` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-devel` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-server` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-test` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql` Red Hat:enterprise_linux:5::client From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5

Show 7 moreShow less

Affected packages
Package	Affected	Fixed
`mysql-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-bench` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-devel` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-server` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5
`mysql-test` Red Hat:enterprise_linux:5::server From an advisory covering 10 CVEs	before 0:5.0.45-7.el5	0:5.0.45-7.el5

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	MySQL 5.0.x - IF Query Handling Remote Denial of Service	2013-12-04

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-2583 is a medium vulnerability (CVSS 4.0) in Oracle Mysql, published May 9, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.3%, the 95th percentile. No source names a fixed version.

References

Show 67 moreShow less