CVEvulnerability
CVE-2014-6119
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-12-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.
Affected configurations
• ibm security appscan 8.5
• ibm security appscan 8.6
• ibm security appscan 8.7
• ibm security appscan 8.8
• ibm security appscan 9.0
• ibm security appscan 9.0.0.1
• ibm security appscan source 9.0.1
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/62012 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21693035 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21693183 www-01.ibm.com
- http://www.securitytracker.com/id/1031427 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96720 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/62012 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21693035 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21693183 www-01.ibm.com
- http://www.securitytracker.com/id/1031427 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96720 exchange.xforce.ibmcloud.com