CVE-2007-1087

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481	Broken Link
http://www-1.ibm.com/support/docview.wss?uid=swg21255747	Patch Vendor Advisory
http://www.securityfocus.com/bid/22677	Patch Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-August/001765.html	Third Party Advisory
http://osvdb.org/40970	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/32651	Third Party Advisory VDB Entry

Configuration 1

cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.7:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.9:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:* cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.8a:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.6:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.6c:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.7b:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.8:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1.9a:*:*:*:*:*:*:*

---

Published : 2007-02-23 10:28

Updated : 2019-05-23 05:02

---

NVD link : CVE-2007-1087

Mitre link : CVE-2007-1087

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer