IBM DB2 Universal Database XML Query Buffer Overflow
2015年7月21日
危険度: : 高
CVE識別番号: CVE-2008-3854
概要
Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1002861
Trend Micro Deep Security DPI Rule Name: 1002861 - IBM DB2 Universal Database XML Query Buffer Overflow
影響を受けるソフトウェア
- IBM DB2 Universal Database 9.1
- IBM DB2 Universal Database 9.5