MySQL MaxDB 7.5.00 for Windows and possibly earlier versions and other platforms allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString (2) DBMCli_String::operator (3) DBMCli_Buffer::ForceResize (4) DBMCli_Wizard::InstallDatabase (5) DBMCli_Devspaces::Complete (6) DBMWeb_TemplateWizard::askForWriteCountStep5 or (7) DBMWeb_DBMWeb::wizardDB functions which triggers a null dereference.