CVE-2007-1087

ALTO 7.2CVE-2007-1087 · Published 23/02/2007 · updated 16/06/2026

Em resumo

CVE-2007-1087 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta db2 (ibm).
Chance de exploração nos próximos 30 dias (EPSS): 0.53%, maior que 44.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
db2 ibm	`= 8.0= 8.1= 8.1.4= 8.1.5= 8.1.6= 8.1.6c= 8.1.7= 8.1.7b= 8.1.8= 8.1.8a= 8.1.9= 8.1.9a= 9.1`	No fix yet

Description

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
osvdb.org/40970 · Broken Link
www-1.ibm.com/support/docview.wss · Patch
attrition.org/pipermail/vim/2007-August/001765.html · Third Party Advisory
securityfocus.com/bid/22677 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/32651 · Third Party Advisory

Mais vulnerabilidades de db2

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

db2

ibm

= 8.0= 8.1= 8.1.4= 8.1.5= 8.1.6= 8.1.6c= 8.1.7= 8.1.7b= 8.1.8= 8.1.8a= 8.1.9= 8.1.9a= 9.1

No fix yet

Mais vulnerabilidades de db2

Ver tudo →