Back to search
CVE-2009-4325
Published: Dec 16, 2009
Modified: Sep 17, 2024
PUBLISHED
Description
The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
LI72709
vendor-advisory
x_refsource_AIXAPAR
LI74500
vendor-advisory
x_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg21293566
x_refsource_CONFIRM
IC64702
vendor-advisory
x_refsource_AIXAPAR
ADV-2009-3520
vdb-entry
x_refsource_VUPEN
37332
vdb-entry
x_refsource_BID
LI74504
vendor-advisory
x_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg21412902
x_refsource_CONFIRM
37759
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now