PT-2020-6670
CVE-2020-4722
·
تاريخ النشر
2020-08-05
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM i2 Analyst's Notebook versions 9.2.0 through 9.2.1
Description
The issue is related to a memory buffer overflow in the IBM i2 Analyst's Notebook tool. Exploitation of this issue could allow an attacker to execute arbitrary code by using a specially crafted file. An attacker could persuade a victim to open this file, thereby executing arbitrary code on the system.
Recommendations
For versions 9.2.0 and 9.2.1, consider avoiding the use of specially crafted files until a patch is available.
As a temporary workaround, restrict access to files from untrusted sources to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾