{"id":"CVE-2009-2943","details":"The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.","modified":"2026-04-10T03:40:52.162042Z","published":"2009-10-22T16:30:00Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/37048"},{"type":"FIX","url":"http://www.debian.org/security/2009/dsa-1909"},{"type":"WEB","url":"http://www.osvdb.org/59029"}],"schema_version":"1.7.5"}