CVE-2010-0462: Buffer Overflow

Published Jan 28, 2010

Updated

Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function.

Affected Software

26 affected components

IBM DB2=9.1-fp4

IBM DB2=9.5

IBM DB2=9.1-fp6a

IBM DB2=9.1-fp1

IBM DB2=9.5-fp4

IBM DB2=9.5-fp5

IBM DB2=9.5-fp4a

IBM DB2=9.1

IBM DB2=9.1-fp5

IBM DB2=9.5-fp1

IBM DB2=9.1-fp3

IBM DB2=9.1-fp7a

IBM DB2=9.1-fp3a

IBM DB2=9.1-fp2a

IBM DB2=9.5-fp2a

IBM DB2=9.1-fp6

IBM DB2=9.7-fp1

IBM DB2=9.1-fp8

IBM DB2=9.1-fp2

IBM DB2=9.1-fp4a

IBM DB2=9.5-fp3b

IBM DB2=9.5-fp2

IBM DB2=9.7

IBM DB2=9.1-fp7

IBM DB2=9.5-fp3

IBM DB2=9.5-fp3a

Event History

Jan 28, 2010

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0462?

CVE-2010-0462 has a medium severity level due to its potential for a heap-based buffer overflow that can be exploited by authenticated users.

How do I fix CVE-2010-0462?

To fix CVE-2010-0462, upgrade IBM DB2 to version 9.1 FP9, 9.5 FP6, or 9.7 FP2 or later.

What versions of IBM DB2 are affected by CVE-2010-0462?

CVE-2010-0462 affects IBM DB2 versions 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2.

Who can exploit the vulnerabilities in CVE-2010-0462?

CVE-2010-0462 can be exploited by remote authenticated users through specific SELECT statements with long column names.

What type of vulnerability is CVE-2010-0462?

CVE-2010-0462 is classified as a heap-based buffer overflow vulnerability.