Vulnerability in the SQLite DBMS
A vulnerability has been discovered in the SQLite database (CVE-2019-5018) that allows arbitrary code execution in the system when an attacker can execute a SQL query prepared by them. The issue stems from an error in the implementation of window functions and is present starting from the SQLite 3.26 branch. The vulnerability was fixed in the April release of SQLite 3.28 without explicit mention of security fixes. A specially crafted SQL query SELECT can lead to […]
