MySQL 5.0 before 5.0.92 5.1 before 5.1.51 and 5.5 before 5.5.6 does not properly propagate type errors which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST related to KILL_BAD_DATA and a \CREATE TABLE ... SELECT.\