CyberRota Analysis
AI-GeneratedThe MongoDB BI Connector ODBC Driver is vulnerable due to a flaw in its setup dialog that allows for an over-length file path, potentially leading to buffer overflow issues. This can result in abnormal termination of the process or, in some cases, execution of arbitrary code with the user's privileges. Organizations using MongoDB should prioritize addressing this vulnerability to mitigate risks associated with unauthorized code execution and service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, and is reached only when a user opens the setup dialog for such a data source and initiates a file or folder selection. Depending on build configuration, the result may range from abnormal process termination to, under certain conditions, execution of unintended code in the context of the user running the dialog.