CVE-2003-0837

IBM DB2 Universal Database 7.2 - Stack-Based Buffer Overflow via INVOKE Command

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command.

References (3)

Core 3
Core References
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/8743
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=106503709914622&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/13331

Scores

EPSS 0.0239
EPSS Percentile 82.2%

Details

Status published
Products (1)
ibm/db2_universal_database 7.2
Published Nov 17, 2003
Tracked Since Feb 18, 2026