Buffer overflow in Ibm Db2

CVE-2007-1087

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Db2 — versions 8.0, 8.1, 8.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
cve@mitre.org (mailing-list, Third Party Advisory, x_refsource_VIM)
cve@mitre.org (vendor-advisory, Patch, Vendor Advisory, x_refsource_AIXAPAR)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_IDEFENSE, Broken Link, third-party-advisory)
cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)