CVE-2007-2582: Buffer Overflow
Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2582?
CVE-2007-2582 is classified as a critical vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2007-2582?
To fix CVE-2007-2582, upgrade your IBM DB2 software to a version that is not affected, preferably one that is later than 9.0.
Who is affected by CVE-2007-2582?
CVE-2007-2582 affects all versions of IBM DB2 9.x and earlier, specifically those utilizing the DB2 JDBC Applet Server.
What are the attack vectors for CVE-2007-2582?
Attackers can exploit CVE-2007-2582 via crafted packets sent to the DB2JDS service on tcp/6789.
What potential impacts does CVE-2007-2582 have?
CVE-2007-2582 can lead to remote code execution or a denial of service, impacting application availability and data security.