Description
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
Remediation
References
Related Vulnerabilities
TYPO3 Cryptographic Issues Vulnerability (CVE-2009-0255)
Oracle JRE CVE-2012-5076 Vulnerability (CVE-2012-5076)
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.23.2)
WordPress Plugin Comment Link Remove and Other Comment Tools Cross-Site Request Forgery (2.1.4)
CubeCart Improper Input Validation Vulnerability (CVE-2013-1465)