CVE-2012-2197 in DB2
Summary
Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
04/04/2012
Disclosure
07/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5691 | IBM DB2 memory corruption | 119 | Not defined | Official fix | CVE-2012-2197 |