6.5
CVE-2010-0462
- EPSS 7.52%
- Veröffentlicht 28.01.2010 20:30:01
- Zuletzt bearbeitet 16.06.2026 23:16:13
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginHeap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.52% | 0.937 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
http://www-01.ibm.com/support/docview.wss?uid=swg21426108
http://www-01.ibm.com/support/docview.wss?uid=swg21432298
http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html
http://securitytracker.com/id?1023509
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65922
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65933
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65935
http://www.securityfocus.com/bid/37976
https://exchange.xforce.ibmcloud.com/vulnerabilities/55899
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14518