Loading
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
Use CWE-119, Yassl vendor hub and Yassl product page to widen CVE-2008-0226 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2005-3731 and CVE-2008-0227 for nearby disclosures in the same product family.