CVEvulnerability
CVE-2009-3160
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.8 HIGH — AV:N/AC:M/Au:N/C:N/I:C/A:C
Description
IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.
Affected configurations
• ibm websphere mq 6
• ibm websphere mq 6.0
• ibm websphere mq 6.0.0.0
• ibm websphere mq 6.0.1.0
• ibm websphere mq 6.0.1.1
• ibm websphere mq 6.0.2.0
• ibm websphere mq 6.0.2.1
• ibm websphere mq 6.0.2.2
• ibm websphere mq 6.0.2.3
• ibm websphere mq 6.0.2.4
• ibm websphere mq 6.0.2.5
• ibm websphere mq 6.0.2.6
• ibm websphere mq 6.0.2.7
• ibm websphere mq 7.0.0.0
• ibm websphere mq 7.0.0.1
• ibm websphere mq 7.0.0.2
• ibm websphere mq 7.0.1.0
References
- http://secunia.com/advisories/36647 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24024153 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259 www-1.ibm.com
- http://www.securityfocus.com/bid/36310 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2578 Patch, Vendor Advisory
- http://secunia.com/advisories/36647 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg24024153 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259 www-1.ibm.com
- http://www.securityfocus.com/bid/36310 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2578 Patch, Vendor Advisory