CVE-2009-4325

Description

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4293

http://www.vupen.com/english/advisories/2009/3520

http://www.securityfocus.com/bid/37332

http://www-01.ibm.com/support/docview.wss?uid=swg21412902

http://www-01.ibm.com/support/docview.wss?uid=swg21293566

http://www-01.ibm.com/support/docview.wss?uid=swg1LI74504

http://www-01.ibm.com/support/docview.wss?uid=swg1LI74500

http://www-01.ibm.com/support/docview.wss?uid=swg1LI72709

http://www-01.ibm.com/support/docview.wss?uid=swg1IC64702

http://secunia.com/advisories/37759

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS