CVE-2009-3160

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.

Metrics

CVSS 2.0 8.8/10AV:N/AC:M/Au:N/C:N/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/36647Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24024153Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578Patch, Vendor Advisory
http://secunia.com/advisories/36647Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24024153Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578Patch, Vendor Advisory

Timeline

Published: Sep 10, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-31617.8The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecifi CVE-2009-31624.3Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search CVE-2009-31637.5Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SI CVE-2009-31647.1Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_122,CVE-2009-31657.5SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3 CVE-2009-31665.0token.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login session that occurs immediately after a pa CVE-2009-31674.3Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to CVE-2009-31687.2Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which all CVE-2009-316910.0Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary co CVE-2009-31709.3Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (cras CVE-2009-31714.3Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web CVE-2009-31727.5Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Se